From: Matthias Kaehlcke <matthias.kaehlcke@gmail.com>
Date: Tue, 31 Jul 2007 07:39:23 +0000 (-0700)
Subject: Videopix Frame Grabber: Fix unreleased lock in vfc_debug()
X-Git-Tag: v3.12-rc1~27326
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=8e48591700f7df5969e17b0a41b7dde011c6810c;p=kernel%2Fkernel-generic.git

Videopix Frame Grabber: Fix unreleased lock in vfc_debug()

Videopix Frame Grabber: vfc_debug() doesn't release the device lock
when copy_from_user() fails

Signed-off-by: Matthias Kaehlcke <matthias.kaehlcke@gmail.com>
Acked-by: "David S. Miller" <davem@davemloft.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
---

diff --git a/drivers/sbus/char/vfc_dev.c b/drivers/sbus/char/vfc_dev.c
index 26b1d2a..9269f7f 100644
--- a/drivers/sbus/char/vfc_dev.c
+++ b/drivers/sbus/char/vfc_dev.c
@@ -248,6 +248,7 @@ static int vfc_debug(struct vfc_dev *dev, int cmd, void __user *argp)
 					buffer,inout.len);
 
 		if (copy_to_user(argp,&inout,sizeof(inout))) {
+			vfc_unlock_device(dev);
 			kfree(buffer);
 			return -EFAULT;
 		}