Merge "msm: vidc: Fix use after free issue in set_output_buffers" (8c024948) · Commits · e / devices / android_kernel_sony_msm8998

drivers/media/platform/msm/vidc/msm_vidc_common.c

+3 −3

Original line number	Diff line number	Diff line
		@@ -3116,7 +3116,7 @@ static int set_output_buffers(struct msm_vidc_inst *inst,
		{
		int rc = 0;
		struct msm_smem *handle;
		struct internal_buf *binfo;
		struct internal_buf *binfo = NULL;
		u32 smem_flags = 0, buffer_size;
		struct hal_buffer_requirements output_buf, extradata_buf;
		int i;
		@@ -3222,10 +3222,10 @@ static int set_output_buffers(struct msm_vidc_inst *inst,
		}
		return rc;
		fail_set_buffers:
		kfree(binfo);
		fail_kzalloc:
		msm_comm_smem_free(inst, handle);
		err_no_mem:
		kfree(binfo);
		fail_kzalloc:
		return rc;
		}