Details
[Home]
Issue of the Implementation # L0123
Brief
drivers/media/usb/hdpvr/hdpvr-core.c: iteration over uninitialized lists in hdpvr_probe()
Detailed Description
free_buff_list and rec_buff_list are initialized in the middle of hdpvr_probe(), but if something bad happens before that, error handling code calls hdpvr_delete(), which contains iteration over the lists (via hdpvr_free_buffers()).
Component
linux-kernel 3.10
Accepted
https://linuxtv.org/patch/19152/
commit
Status
Fixed in kernel 3.11-rc3
[Home]
»