diff options
| author | Jesper Juhl <jj@chaosbits.net> | 2008-11-25 16:57:54 +0300 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@redhat.com> | 2012-12-21 22:28:58 +0400 |
| commit | bbe2a1d32f40c01ca1a7e7795e20ca06f87ffc9b (patch) | |
| tree | 1f448364296d0be3d7ddb15f1fc31e1c8abef708 /drivers/media/rc/gpio-ir-recv.c | |
| parent | e5d85b9ac3133f67460ea5b2d4e33e0473d6eb4b (diff) | |
| download | linux-bbe2a1d32f40c01ca1a7e7795e20ca06f87ffc9b.tar.xz | |
[media] rc: Fix double free in gpio_ir_recv_remove()
Since rc_unregister_device() frees its argument there's no need to
subsequently call rc_free_device() on the same variable - in fact it's
a double free bug.
Easily fixed by just removing the rc_free_device() call.
Signed-off-by: Jesper Juhl <jj@chaosbits.net>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers/media/rc/gpio-ir-recv.c')
| -rw-r--r-- | drivers/media/rc/gpio-ir-recv.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/media/rc/gpio-ir-recv.c b/drivers/media/rc/gpio-ir-recv.c index 32db5f59fbc3..03e3cf6eb68f 100644 --- a/drivers/media/rc/gpio-ir-recv.c +++ b/drivers/media/rc/gpio-ir-recv.c @@ -148,7 +148,6 @@ static int __devexit gpio_ir_recv_remove(struct platform_device *pdev) platform_set_drvdata(pdev, NULL); rc_unregister_device(gpio_dev->rcdev); gpio_free(gpio_dev->gpio_nr); - rc_free_device(gpio_dev->rcdev); kfree(gpio_dev); return 0; } |