Patch "[media] vivid: Fix iteration in driver removal path" has been added to the 4.3-stable tree
Subsystems (2)
This is a note to let you know that I've just added the patch titled
[media] vivid: Fix iteration in driver removal path
to the 4.3-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
vivid-fix-iteration-in-driver-removal-path.patch
and it can be found in the queue-4.3 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
a5d42b8c3b3ddccd88dc1c70957177d31a6699fbMon Sep 17 00:00:00 2001
From: Ezequiel Garcia <[email protected]>
Date: Mon, 28 Sep 2015 18:36:51 -0300
Subject: [media] vivid: Fix iteration in driver removal path
From: Ezequiel Garcia <[email protected]>
commit a5d42b8c3b3ddccd88dc1c70957177d31a6699fb upstream.
When the diver is removed and all the resources are deallocated, we should be iterating through the created devices only.
Currently, the iteration ends when vivid_devs[i] is NULL. Since the array contains VIVID_MAX_DEVS elements, it will oops if n_devs=VIVID_MAX_DEVS because in that case, no element is NULL.
--- drivers/media/platform/vivid/vivid-core.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-)
drivers/media/platform/vivid/vivid-core.c +4 -1
@@ -1341,8 +1341,11 @@ static int vivid_remove(struct platform_struct vivid_dev *dev;unsigned i; -for (i =0 ; vivid_devs[i]; i++) { + +for (i =0 ; i < n_devs; i++) { dev = vivid_devs[i]; +if (!dev) +continue ;if (dev->has_vid_cap) { v4l2_info(&dev->v4l2_dev, "unregistering %s\n",
Patches currently in stable-queue which might be from [email protected] are
queue-4.3/vivid-fix-iteration-in-driver-removal-path.patch