Dinghao Liu 451c7cb236 media: em28xx: Fix use-after-free in em28xx_alloc_urbs ... [ Upstream commit a26efd1961a18b91ae4cd2e433adbcf865b40fa3 ] When kzalloc() fails, em28xx_uninit_usb_xfer() will free usb_bufs->buf and set it to NULL. Thus the later access to usb_bufs->buf[i] will lead to null pointer dereference. Also the kfree(usb_bufs->buf) after that is redundant. Fixes: d571b592c6 ("media: em28xx: don't use coherent buffer for DMA transfers") Signed-off-by: Dinghao Liu <dinghao.liu@zju.edu.cn> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-03-04 11:37:39 +01:00
..
airspy
as102
au0828
b2c2
cpia2
cx231xx
dvb-usb	media: gp8psk: initialize stats at power control logic	2021-01-06 14:56:52 +01:00
dvb-usb-v2
em28xx	media: em28xx: Fix use-after-free in em28xx_alloc_urbs	2021-03-04 11:37:39 +01:00
go7007
gspca	media: gspca: Fix memory leak in probe	2020-12-30 11:54:03 +01:00
hackrf
hdpvr
msi2500
pvrusb2
pwc	media: pwc: Use correct device for DMA	2021-02-23 15:53:25 +01:00
s2255
siano
stk1160
stkwebcam
tm6000
ttusb-budget
ttusb-dec
usbtv
uvc
zr364xx
Kconfig
Makefile