diff options
| author | Jesper Juhl <jj@chaosbits.net> | 2011-06-13 23:52:02 +0200 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2011-06-14 07:27:26 +0200 |
| commit | 37f7ec38ea5c31180461f82e895e13fdd549b595 (patch) | |
| tree | edabbd3298390da475ea280030c1cf870aac8818 /security | |
| parent | 2308f4add3de9f6c9c9f02e49461e94d84bb200a (diff) | |
| download | op-kernel-dev-37f7ec38ea5c31180461f82e895e13fdd549b595.zip op-kernel-dev-37f7ec38ea5c31180461f82e895e13fdd549b595.tar.gz | |
ALSA: 6fire: Fix double-free bug in usb6fire_fw_ezusb_upload()
We have a double-free bug in
sound/usb/6fire/firmware.c::usb6fire_fw_ezusb_upload().
We already call release_firmware(fw) on line 258, so when we then do it
again after usb6fire_fw_ezusb_write() returns <0, we have a double-free.
Easily fixed by just removing the last call to release_firmware().
Signed-off-by: Jesper Juhl <jj@chaosbits.net>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions
