IR: ir-raw-event: null pointer dereference
Subsystems (2)
PATCH 1/1 IR: ir-raw-event: null pointer dereference
The original code dereferenced ir->raw after freeing it and setting it to NULL.
Signed-off-by Dan Carpenter <[email protected]>
drivers/media/IR/ir-raw-event.c +3 -1
@@ -279,9 +279,11 @@ int ir_raw_event_register(struct input_dev *input_dev) "rc%u", (unsigned int)ir->devno);if (IS_ERR (ir->raw->thread)) { +int ret =PTR_ERR (ir->raw->thread); +kfree (ir->raw); ir->raw =NULL ; -return PTR_ERR (ir->raw->thread); +return ret; }mutex_lock (&ir_raw_handler_lock);
Quoted 4 lines · ----- Dan Carpenter
The original code dereferenced
ir->rawafter freeing it and setting it to NULL.Signed-off-by Dan Carpenter <[email protected]>
Acked-by Jarod Wilson <[email protected]>
Signature · 2 lines
Jarod Wilson [email protected]