mirror of
https://github.com/torvalds/linux.git
synced 2024-12-04 01:51:34 +00:00
6d8acd02c4
struct v4l2_async_notifier has several list_head members, but only
waiting_list and done_list are initialized. notifier_entry was kept
'zeroed' leading to an uninitialized list_head.
This results in a NULL-pointer dereference if csi2_async_register() fails,
e.g. node for remote endpoint is disabled, and returns -ENOTCONN.
The following calls to v4l2_async_nf_unregister() results in a NULL
pointer dereference.
Add the missing list head initializer.
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| tuner-core.c | ||
| v4l2-async.c | ||
| v4l2-cci.c | ||
| v4l2-common.c | ||
| v4l2-compat-ioctl32.c | ||
| v4l2-ctrls-api.c | ||
| v4l2-ctrls-core.c | ||
| v4l2-ctrls-defs.c | ||
| v4l2-ctrls-priv.h | ||
| v4l2-ctrls-request.c | ||
| v4l2-dev.c | ||
| v4l2-device.c | ||
| v4l2-dv-timings.c | ||
| v4l2-event.c | ||
| v4l2-fh.c | ||
| v4l2-flash-led-class.c | ||
| v4l2-fwnode.c | ||
| v4l2-h264.c | ||
| v4l2-i2c.c | ||
| v4l2-ioctl.c | ||
| v4l2-jpeg.c | ||
| v4l2-mc.c | ||
| v4l2-mem2mem.c | ||
| v4l2-spi.c | ||
| v4l2-subdev-priv.h | ||
| v4l2-subdev.c | ||
| v4l2-trace.c | ||
| v4l2-vp9.c | ||