V4L/DVB (4994): Vivi: fix use after free in list_for_each()
Freeing data including list_head in list_for_each() is not safe. Signed-off-by: Akinobu Mita <akinobu.mita@gmail.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
This commit is contained in:
Родитель
b331daa03c
Коммит
72f678c301
|
@ -1363,7 +1363,9 @@ static void __exit vivi_exit(void)
|
|||
struct vivi_dev *h;
|
||||
struct list_head *list;
|
||||
|
||||
list_for_each(list,&vivi_devlist) {
|
||||
while (!list_empty(&vivi_devlist)) {
|
||||
list = vivi_devlist.next;
|
||||
list_del(list);
|
||||
h = list_entry(list, struct vivi_dev, vivi_devlist);
|
||||
kfree (h);
|
||||
}
|
||||
|
|
Загрузка…
Ссылка в новой задаче