adefdceef4
dvb_dmx_init tries to allocate virtual memory for 2 pointers: filter and feed. If the second vmalloc fails, filter is freed, but the pointer keeps pointing to the old place. Later, when dvb_dmx_release() is called, it will try to free an already freed memory, causing an OOPS. Reviewed-by: Andy Walls <awalls@radix.net> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com> |
||
|---|---|---|
| .. | ||
| demux.h | ||
| dmxdev.c | ||
| dmxdev.h | ||
| dvb_ca_en50221.c | ||
| dvb_ca_en50221.h | ||
| dvb_demux.c | ||
| dvb_demux.h | ||
| dvb_filter.c | ||
| dvb_filter.h | ||
| dvb_frontend.c | ||
| dvb_frontend.h | ||
| dvb_math.c | ||
| dvb_math.h | ||
| dvb_net.c | ||
| dvb_net.h | ||
| dvb_ringbuffer.c | ||
| dvb_ringbuffer.h | ||
| dvbdev.c | ||
| dvbdev.h | ||
| Makefile | ||