linux/drivers/media
Julia Lawall ed0ee8e1fb V4L/DVB (13948): radio: Correct use after free
It is not clear how to share the unlock in the case where the structure
containing the lock has to be freed.  So the unlock is now duplicated, with
one copy moved before the free.  The unlock label furthermore is no longer
useful and is thus deleted.

A simplified version of the semantic match that finds this problem is as
follows: (http://coccinelle.lip6.fr/)

// <smpl>
@@
expression x,e;
identifier f;
iterator I;
statement S;
@@

*kfree(x);
... when != &x
    when != x = e
    when != I(x,...) S
*x->f
// </smpl>

Signed-off-by: Julia Lawall <julia@diku.dk>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
2010-02-26 15:10:33 -03:00
..
common saa7146: stop DMA before de-allocating DMA scatter/gather page buffers 2010-02-01 22:02:03 -02:00
dvb V4L/DVB (13946): proc_fops: convert av7110 2010-02-26 15:10:33 -03:00
IR V4L/DVB (13856): ir-keytable: simplify and avoid a warning 2010-02-26 15:10:26 -03:00
radio V4L/DVB (13948): radio: Correct use after free 2010-02-26 15:10:33 -03:00
video V4L/DVB (13945): Add lost config and PCI ID for card of Beholder 2010-02-26 15:10:32 -03:00
Kconfig V4L/DVB (13612): IR: Move common IR code to drivers/media/IR 2009-12-16 00:18:42 -02:00
Makefile V4L/DVB (13612): IR: Move common IR code to drivers/media/IR 2009-12-16 00:18:42 -02:00