112024a3b6
Adding kfree(dvb) to vidtv_bridge_remove() will remove the memory
too soon: if an application still has an open filehandle to the device
when the driver is unloaded, then when that filehandle is closed, a
use-after-free access takes place to the freed memory.
Move the kfree(dvb) to vidtv_bridge_dev_release() instead.
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Fixes:
|
||
---|---|---|
.. | ||
vicodec | ||
vidtv | ||
vimc | ||
vivid | ||
Kconfig | ||
Makefile | ||
vim2m.c |