]> www.infradead.org Git - users/hch/misc.git/commitdiff
media: cx18: Add missing check after DMA map
authorThomas Fourier <fourier.thomas@gmail.com>
Wed, 9 Jul 2025 11:35:40 +0000 (13:35 +0200)
committerHans Verkuil <hverkuil+cisco@kernel.org>
Fri, 29 Aug 2025 09:04:01 +0000 (11:04 +0200)
The DMA map functions can fail and should be tested for errors.
If the mapping fails, dealloc buffers, and return.

Fixes: 1c1e45d17b66 ("V4L/DVB (7786): cx18: new driver for the Conexant CX23418 MPEG encoder chip")
Cc: stable@vger.kernel.org
Signed-off-by: Thomas Fourier <fourier.thomas@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
drivers/media/pci/cx18/cx18-queue.c

index 013694bfcb1c1bc4e4b697b9a5064f091a0691b7..7cbb2d5869320b96e50c98b4e3bc27402b7f28a2 100644 (file)
@@ -379,15 +379,22 @@ int cx18_stream_alloc(struct cx18_stream *s)
                        break;
                }
 
+               buf->dma_handle = dma_map_single(&s->cx->pci_dev->dev,
+                                                buf->buf, s->buf_size,
+                                                s->dma);
+               if (dma_mapping_error(&s->cx->pci_dev->dev, buf->dma_handle)) {
+                       kfree(buf->buf);
+                       kfree(mdl);
+                       kfree(buf);
+                       break;
+               }
+
                INIT_LIST_HEAD(&mdl->list);
                INIT_LIST_HEAD(&mdl->buf_list);
                mdl->id = s->mdl_base_idx; /* a somewhat safe value */
                cx18_enqueue(s, mdl, &s->q_idle);
 
                INIT_LIST_HEAD(&buf->list);
-               buf->dma_handle = dma_map_single(&s->cx->pci_dev->dev,
-                                                buf->buf, s->buf_size,
-                                                s->dma);
                cx18_buf_sync_for_cpu(s, buf);
                list_add_tail(&buf->list, &s->buf_pool);
        }