[media] cx231xx: fix double free and leaks on failure path in cx231xx_usb_probe()
authorAlexey Khoroshilov <khoroshilov@ispras.ru>
Mon, 7 Oct 2013 21:06:04 +0000 (18:06 -0300)
committerMauro Carvalho Chehab <m.chehab@samsung.com>
Thu, 17 Oct 2013 09:05:28 +0000 (06:05 -0300)
commit256d013a9bcc9a39b2e4b34ab19219bd054cf270
treeb16380050dbe612e9c3a60e9f5bd5d6b006faaaf
parent1f61d41585f8a7a52d67fd3d6aa4aa6db75f360c
[media] cx231xx: fix double free and leaks on failure path in cx231xx_usb_probe()

There are numerous issues in error handling code of cx231xx initialization.
Double free (when cx231xx_init_dev() calls kfree(dev) via cx231xx_release_resources()
and then cx231xx_usb_probe() does the same) and memory leaks
(e.g. usb_get_dev() before (ifnum != 1) check in cx231xx_usb_probe())
are just a few of them.
The patch fixes the issues in cx231xx_usb_probe() and cx231xx_init_dev()
by moving usb_get_dev(interface_to_usbdev(interface)) below in code and
implementing proper error handling.
Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
drivers/media/usb/cx231xx/cx231xx-cards.c