android_kernel_asus_sm8350/drivers/media/dvb-core
Dan Carpenter 68ec0a0211 media: dvbdev: drop refcount on error path in dvb_device_open()
[ Upstream commit a2dd235df435a05d389240be748909ada91201d2 ]

If call to file->f_op->open() fails, then call dvb_device_put(dvbdev).

Fixes: 0fc044b2b5e2 ("media: dvbdev: adopts refcnt to avoid UAF")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-01-25 14:34:28 -08:00
..
dmxdev.c media: dvb-core: Fix UAF due to refcount races at releasing 2023-01-18 11:41:48 +01:00
dvb_ca_en50221.c media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 2023-06-09 10:28:58 +02:00
dvb_demux.c media: dvb_demux: fix a bug for the continuity counter 2023-06-09 10:28:56 +02:00
dvb_frontend.c media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() 2023-06-09 10:28:58 +02:00
dvb_math.c
dvb_net.c media: dvb-core: Fix use-after-free due on race condition at dvb_net 2023-06-09 10:28:57 +02:00
dvb_ringbuffer.c
dvb_vb2.c media: dvb_vb2: fix possible out of bound access 2022-10-05 10:37:43 +02:00
dvbdev.c media: dvbdev: drop refcount on error path in dvb_device_open() 2024-01-25 14:34:28 -08:00
Kconfig
Makefile