projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a9709e4) | patch
[media] media-entity: fix backlink removal on __media_entity_remove_link()
authorMauro Carvalho Chehab <mchehab@osg.samsung.com>
Thu, 10 Dec 2015 17:29:22 +0000 (15:29 -0200)
committerMauro Carvalho Chehab <mchehab@osg.samsung.com>
Mon, 11 Jan 2016 14:18:57 +0000 (12:18 -0200)
commiteb83a5176801d53f9f78eff8c0bf03e627110206
tree4c5968691fc4672acf9624cd271abf14f96795adtree | snapshot (tar.gz zip)
parenta9709e435454cf84d8971261ff8ded3a453b9b13commit | diff
[media] media-entity: fix backlink removal on __media_entity_remove_link()

The logic is testing if num_links==0 at the wrong place. Due to
that, a backlink may be kept without removal, causing KASAN
to complain about usage after free during either entity or
link removal.

Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
drivers/media/media-entity.c diff | blob | blame | history