media: hdpvr: fix iteration over uninitialized lists in hdpvr_probe()
authorAlexey Khoroshilov <khoroshilov@ispras.ru>
Wed, 3 Jul 2013 19:17:34 +0000 (16:17 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 14 Apr 2014 13:44:33 +0000 (06:44 -0700)
commit96ca9726343c0166dbdbe85c0d80a95c44a0c90a
tree47702801499ae014b4b750ca9c6ab097599d7533
parent092bc21ef043d7fb4515f54ccbd17d98a20e76fb
media: hdpvr: fix iteration over uninitialized lists in hdpvr_probe()

commit 2e923a0527ac439e135b9961e58d3acd876bba10 upstream.

free_buff_list and rec_buff_list are initialized in the middle of hdpvr_probe(),
but if something bad happens before that, error handling code calls hdpvr_delete(),
which contains iteration over the lists (via hdpvr_free_buffers()).
The patch moves the lists initialization to the beginning and by the way fixes
goto label in error handling of registering videodev.
Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
[bwh: Backported to 3.2: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Cc: Jianguo Wu <wujianguo@huawei.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/video/hdpvr/hdpvr-core.c