[Home]

Issue of the Implementation # L0123

Brief

drivers/media/usb/hdpvr/hdpvr-core.c: iteration over uninitialized lists in hdpvr_probe()

Detailed Description

free_buff_list and rec_buff_list are initialized in the middle of hdpvr_probe(), but if something bad happens before that, error handling code calls hdpvr_delete(), which contains iteration over the lists (via hdpvr_free_buffers()).

Component

linux-kernel 3.10

Accepted

https://linuxtv.org/patch/19152/
commit

Status

Fixed in kernel 3.11-rc3

[Home]