diff options
author | Dan Carpenter <error27@gmail.com> | 2010-05-05 01:58:57 -0400 |
---|---|---|
committer | Mauro Carvalho Chehab <mchehab@redhat.com> | 2010-05-19 11:59:13 -0400 |
commit | 16ee9bb100340f9f775ab334acb645f54642f312 (patch) | |
tree | 09dab848ac2864d5d76d714a67a01d85ed545a9b /drivers | |
parent | a7b39036cfd1d3f868a6745e40bc99b2a8650bad (diff) |
V4L/DVB: media/mem2mem: dereferencing free memory
We dereferenced "ctx" on the error path.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers')
-rw-r--r-- | drivers/media/video/mem2mem_testdev.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/drivers/media/video/mem2mem_testdev.c b/drivers/media/video/mem2mem_testdev.c index baf211b9f6ce..b161d26b0ddf 100644 --- a/drivers/media/video/mem2mem_testdev.c +++ b/drivers/media/video/mem2mem_testdev.c | |||
@@ -871,8 +871,10 @@ static int m2mtest_open(struct file *file) | |||
871 | 871 | ||
872 | ctx->m2m_ctx = v4l2_m2m_ctx_init(ctx, dev->m2m_dev, queue_init); | 872 | ctx->m2m_ctx = v4l2_m2m_ctx_init(ctx, dev->m2m_dev, queue_init); |
873 | if (IS_ERR(ctx->m2m_ctx)) { | 873 | if (IS_ERR(ctx->m2m_ctx)) { |
874 | int ret = PTR_ERR(ctx->m2m_ctx); | ||
875 | |||
874 | kfree(ctx); | 876 | kfree(ctx); |
875 | return PTR_ERR(ctx->m2m_ctx); | 877 | return ret; |
876 | } | 878 | } |
877 | 879 | ||
878 | atomic_inc(&dev->num_inst); | 880 | atomic_inc(&dev->num_inst); |