sound: usb: Fix use after free in driver probe
In case of an error condition snd_card_free() is called
if chip->num_interfaces is zero. snd_card_free() frees
chip instance by calling snd_usb_audio_free(). chip->active
is being decremented after freeing chip instance resulting
into use after free. Hence decrement chip->active only if
chip->num_interfaces is non-zero.
Change-Id: I74784cab930bf9d74432226f8a0db33cfb869b30
Signed-off-by:
Hemant Kumar <hemantk@codeaurora.org>
Loading
Please register or sign in to comment