media: dvbdev: drop refcount on error path in dvb_device_open()
authorDan Carpenter <dan.carpenter@linaro.org>
Tue, 31 Oct 2023 09:53:33 +0000 (12:53 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Jan 2024 23:35:35 +0000 (15:35 -0800)
commitde28d63ad35c7c58cb2e707db069a95e068c276b
tree74be0df13e415bbeb31f40e2d2cb8d3aef4a7883
parent7bf0cba7f7e8ecd48fcc66960161408f3e88fc45
media: dvbdev: drop refcount on error path in dvb_device_open()

[ Upstream commit a2dd235df435a05d389240be748909ada91201d2 ]

If call to file->f_op->open() fails, then call dvb_device_put(dvbdev).

Fixes: 0fc044b2b5e2 ("media: dvbdev: adopts refcnt to avoid UAF")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/media/dvb-core/dvbdev.c