Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Dan Carpenter a1a57a7ff3 media: dvbdev: drop refcount on error path in dvb_device_open() ... [ Upstream commit a2dd235df4 ] If call to file->f_op->open() fails, then call dvb_device_put(dvbdev). Fixes: 0fc044b2b5 ("media: dvbdev: adopts refcnt to avoid UAF") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>		History 2024-01-25 15:45:03 -08:00
..
dmxdev.c	media: dvb-core: Fix UAF due to refcount races at releasing	2022-11-04 16:56:43 +01:00
dvb_ca_en50221.c	media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221	2023-05-14 16:04:48 +01:00
dvb_demux.c	media: dvb_demux: fix a bug for the continuity counter	2023-05-13 08:20:01 +01:00
dvb_frontend.c	Revert "media: dvb-core: Fix use-after-free on race condition at dvb_frontend"	2023-06-14 23:16:29 +01:00
dvb_net.c	media: dvb-core: Fix use-after-free due on race condition at dvb_net	2023-05-14 06:30:45 +01:00
dvb_ringbuffer.c	media: dvb_ringbuffer : Fix a bug in dvb_ringbuffer.c	2022-11-25 10:05:25 +00:00
dvb_vb2.c	media: dvb_vb2: fix possible out of bound access	2022-09-27 10:24:44 +02:00
dvbdev.c	media: dvbdev: drop refcount on error path in dvb_device_open()	2024-01-25 15:45:03 -08:00
Kconfig	media: Kconfig: cleanup VIDEO_DEV dependencies	2022-03-18 05:58:35 +01:00
Makefile	lib/math: Move dvb_math.c into lib/math/int_log.c	2023-07-09 22:47:48 +01:00