]> www.infradead.org Git - users/dwmw2/linux.git/commit
media: radio/si470x: kill urb on error
authorHans Verkuil <hverkuil-cisco@xs4all.nl>
Thu, 15 Aug 2019 12:40:52 +0000 (09:40 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 5 Oct 2019 11:13:42 +0000 (13:13 +0200)
commitea9b3fba2de54636cb0294e36b1c66d3b8d83d6c
tree4d66d0b3ed1ad45b2e95ad212e450e3200edea78
parentabec08cc8afdade0b84e97deaf4d4478b760b3a7
media: radio/si470x: kill urb on error

[ Upstream commit 0d616f2a3fdbf1304db44d451d9f07008556923b ]

In the probe() function radio->int_in_urb was not killed if an
error occurred in the probe sequence. It was also missing in
the disconnect.

This caused this syzbot issue:

https://syzkaller.appspot.com/bug?extid=2d4fc2a0c45ad8da7e99

Reported-and-tested-by: syzbot+2d4fc2a0c45ad8da7e99@syzkaller.appspotmail.com
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/media/radio/si470x/radio-si470x-usb.c