diff options
author | Daniel Mack <daniel@zonque.org> | 2014-10-07 13:41:24 +0200 |
---|---|---|
committer | Mark Brown <broonie@kernel.org> | 2014-10-07 13:11:35 +0100 |
commit | e5092c96c9c28f4d12811edcd02ca8eec16e748e (patch) | |
tree | 67be9d9351f59ab72e9f93242908190ad9c79ae4 /security/smack/smackfs.c | |
parent | a5448c88b812390a3622e76d774e10c0da1fb970 (diff) |
ASoC: soc-dapm: fix use after free
Coverity spotted the following possible use-after-free condition in
dapm_create_or_share_mixmux_kcontrol():
If kcontrol is NULL, and (wname_in_long_name && kcname_in_long_name)
validates to true, 'name' will be set to an allocated string, and be
freed a few lines later via the 'long_name' alias. 'name', however,
is used by dev_err() in case snd_ctl_add() fails.
Fix this by adding a jump label that frees 'long_name' at the end of
the function.
Signed-off-by: Daniel Mack <daniel@zonque.org>
Signed-off-by: Mark Brown <broonie@kernel.org>
Cc: stable@vger.kernel.org
Diffstat (limited to 'security/smack/smackfs.c')
0 files changed, 0 insertions, 0 deletions