summaryrefslogtreecommitdiff
path: root/drivers/media/rc/gpio-ir-recv.c
diff options
context:
space:
mode:
authorJesper Juhl <jj@chaosbits.net>2008-11-25 16:57:54 +0300
committerMauro Carvalho Chehab <mchehab@redhat.com>2012-12-21 22:28:58 +0400
commitbbe2a1d32f40c01ca1a7e7795e20ca06f87ffc9b (patch)
tree1f448364296d0be3d7ddb15f1fc31e1c8abef708 /drivers/media/rc/gpio-ir-recv.c
parente5d85b9ac3133f67460ea5b2d4e33e0473d6eb4b (diff)
downloadlinux-bbe2a1d32f40c01ca1a7e7795e20ca06f87ffc9b.tar.xz
[media] rc: Fix double free in gpio_ir_recv_remove()
Since rc_unregister_device() frees its argument there's no need to subsequently call rc_free_device() on the same variable - in fact it's a double free bug. Easily fixed by just removing the rc_free_device() call. Signed-off-by: Jesper Juhl <jj@chaosbits.net> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers/media/rc/gpio-ir-recv.c')
-rw-r--r--drivers/media/rc/gpio-ir-recv.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/media/rc/gpio-ir-recv.c b/drivers/media/rc/gpio-ir-recv.c
index 32db5f59fbc3..03e3cf6eb68f 100644
--- a/drivers/media/rc/gpio-ir-recv.c
+++ b/drivers/media/rc/gpio-ir-recv.c
@@ -148,7 +148,6 @@ static int __devexit gpio_ir_recv_remove(struct platform_device *pdev)
platform_set_drvdata(pdev, NULL);
rc_unregister_device(gpio_dev->rcdev);
gpio_free(gpio_dev->gpio_nr);
- rc_free_device(gpio_dev->rcdev);
kfree(gpio_dev);
return 0;
}