Commit bbe2a1d3 authored by Jesper Juhl's avatar Jesper Juhl Committed by Mauro Carvalho Chehab
Browse files

[media] rc: Fix double free in gpio_ir_recv_remove() 



Since rc_unregister_device() frees its argument there's no need to
subsequently call rc_free_device() on the same variable - in fact it's
a double free bug.
Easily fixed by just removing the rc_free_device() call.

Signed-off-by: default avatarJesper Juhl <jj@chaosbits.net>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@redhat.com>
parent e5d85b9a

drivers/media/rc/gpio-ir-recv.c

+0 −1
Original line number Diff line number Diff line
@@ -148,7 +148,6 @@ static int __devexit gpio_ir_recv_remove(struct platform_device *pdev) 
	platform_set_drvdata(pdev, NULL);

	rc_unregister_device(gpio_dev->rcdev);

	gpio_free(gpio_dev->gpio_nr);

	rc_free_device(gpio_dev->rcdev);

	kfree(gpio_dev);

	return 0;

}