Dan Carpenter d4030a0f22 media: dvbdev: drop refcount on error path in dvb_device_open() ...

[ Upstream commit a2dd235df435a05d389240be748909ada91201d2 ]

If call to file->f_op->open() fails, then call dvb_device_put(dvbdev).

Fixes: 0fc044b2b5e2 ("media: dvbdev: adopts refcnt to avoid UAF")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 782a58a14de9f6551dc0e82c19e0caa6f7cc419c)
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>

2024-02-02 11:33:44 +00:00

..

cec

media: cec: copy sequence field for the reply

2021-12-08 08:46:47 +01:00

common

media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()

2022-01-27 09:00:55 +01:00

dvb-core

media: dvbdev: drop refcount on error path in dvb_device_open()

2024-02-02 11:33:44 +00:00

dvb-frontends

media: dvb: symbol fixup for dvb_attach() - again

2023-10-10 21:43:40 +02:00

firewire

media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()

2021-11-12 14:28:22 +01:00

i2c

media: m5mols: fix off-by-one loop termination error

2023-03-22 13:26:15 +01:00

mmc

…

pci

media: pci: cx23885: replace BUG with error return

2023-09-23 10:47:05 +02:00

platform

media: venus: hfi: fix the check to handle session buffer requirement

2023-11-28 16:45:45 +00:00

radio

media: radio-shark: Add endpoint checks

2023-05-30 12:38:38 +01:00

rc

media: sharp: fix sharp encoding

2023-11-28 16:45:45 +00:00

spi

…

tuners

media: dvb: symbol fixup for dvb_attach() - again

2023-10-10 21:43:40 +02:00

usb

media: cx231xx: fix a memleak in cx231xx_init_isoc

2024-02-02 11:33:43 +00:00

v4l2-core

media: v4l2-dv-timings.c: fix too strict blanking sanity checks

2022-12-14 11:26:13 +01:00

Kconfig

…

Makefile

…

media-device.c

media: mc-device.c: don't memset __user pointer contents

2019-07-31 07:28:22 +02:00

media-devnode.c

…

media-entity.c

…