| commit | 5ae29649e03f58be0f412c21b62b203aa7cf1680 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Mon Jul 31 18:45:41 2017 +0200 |
| committer | Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com> | Mon Jul 31 18:45:41 2017 +0200 |
| tree | 656790e6704b6f12ae9d73ce6fd46a2d466853e1 | |
| parent | 16f73eb02d7e1765ccab3d2018e0bd98eb93d973 [diff] |
video: fbdev: imxfb: use after free in imxfb_remove() We free "info" then dereference it on the next line. Really this whole function would be better if we wrote it to unwind in the mirror of how things are allocated in the probe. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: Alexander Shiyan <shc_work@mail.ru> Cc: Sascha Hauer <kernel@pengutronix.de> Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>