mirror of
https://github.com/torvalds/linux.git
synced 2024-11-24 13:11:40 +00:00
[media] saa7134: Fix crash when device is closed before streamoff
pm_qos_remove_request was not called on video_release, resulting in the PM core's list of requests being corrupted when the file handle was freed. This has no immediate symptoms, but later in operation, the kernel will panic as the PM core dereferences a dangling pointer. Signed-off-by: Simon Farnsworth <simon.farnsworth@onelan.co.uk> Acked-by: Hans Verkuil <hans.verkuil@cisco.com> Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com> Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
This commit is contained in:
parent
f527b17ace
commit
9c9cff55bf
@ -1455,6 +1455,7 @@ static int video_release(struct file *file)
|
||||
|
||||
/* stop video capture */
|
||||
if (res_check(fh, RESOURCE_VIDEO)) {
|
||||
pm_qos_remove_request(&dev->qos_request);
|
||||
videobuf_streamoff(&fh->cap);
|
||||
res_free(dev,fh,RESOURCE_VIDEO);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user