diff options
| author | Hans Verkuil <hans.verkuil@cisco.com> | 2018-08-27 18:23:41 +0300 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab+samsung@kernel.org> | 2018-09-11 16:55:39 +0300 |
| commit | ffda0b4c2481b2a0faf634abccb1da0d0ba4eddb (patch) | |
| tree | 828fdfd532676a7f0b61b889614fa0d2b617ba56 /drivers/media/media-request.c | |
| parent | ca6c163399a9f1913efdbeab654a185b3cde03c4 (diff) | |
| download | linux-ffda0b4c2481b2a0faf634abccb1da0d0ba4eddb.tar.xz | |
media: v4l2-ctrls: improve media_request_(un)lock_for_update
The request reference count was decreased again once a reference to the
request object was taken. Postpone this until we finished using the object.
In theory I think it is possible that the request_fd can be closed by
the application from another thread. In that case when request_put is
called the whole request would be freed.
It's highly unlikely, but let's just be safe and fix this potential
race condition.
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Reviewed-by: Tomasz Figa <tfiga@chromium.org>
Acked-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Diffstat (limited to 'drivers/media/media-request.c')
0 files changed, 0 insertions, 0 deletions