lkml.org 
[lkml]   [2011]   [Apr]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH] v4l: make sure drivers supply a zeroed struct v4l2_subdev
Date
On Friday, April 01, 2011 19:12:02 Herton Ronaldo Krzesinski wrote:
> Some v4l drivers currently don't initialize their struct v4l2_subdev
> with zeros, and this is a problem since some of the v4l2 code expects
> this. One example is the addition of internal_ops in commit 45f6f84,
> after that we are at risk of random oopses with these drivers when code
> in v4l2_device_register_subdev tries to dereference sd->internal_ops->*,
> as can be shown by the report at http://bugs.launchpad.net/bugs/745213
> and analysis of its crash at https://lkml.org/lkml/2011/4/1/168
>
> Use kzalloc within problematic drivers to ensure we have a zeroed struct
> v4l2_subdev.
>
> BugLink: http://bugs.launchpad.net/bugs/745213
> Cc: <stable@kernel.org>
> Signed-off-by: Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com>

Acked-by: Hans Verkuil <hverkuil@xs4all.nl>

Thanks!

Hans

> ---
> drivers/media/radio/saa7706h.c | 2 +-
> drivers/media/radio/tef6862.c | 2 +-
> drivers/media/video/m52790.c | 2 +-
> drivers/media/video/tda9840.c | 2 +-
> drivers/media/video/tea6415c.c | 2 +-
> drivers/media/video/tea6420.c | 2 +-
> drivers/media/video/upd64031a.c | 2 +-
> drivers/media/video/upd64083.c | 2 +-
> 8 files changed, 8 insertions(+), 8 deletions(-)
>
> diff --git a/drivers/media/radio/saa7706h.c b/drivers/media/radio/saa7706h.c
> index 585680f..b1193df 100644
> --- a/drivers/media/radio/saa7706h.c
> +++ b/drivers/media/radio/saa7706h.c
> @@ -376,7 +376,7 @@ static int __devinit saa7706h_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%02x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - state = kmalloc(sizeof(struct saa7706h_state), GFP_KERNEL);
> + state = kzalloc(sizeof(struct saa7706h_state), GFP_KERNEL);
> if (state == NULL)
> return -ENOMEM;
> sd = &state->sd;
> diff --git a/drivers/media/radio/tef6862.c b/drivers/media/radio/tef6862.c
> index 7c0d777..0991e19 100644
> --- a/drivers/media/radio/tef6862.c
> +++ b/drivers/media/radio/tef6862.c
> @@ -176,7 +176,7 @@ static int __devinit tef6862_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%02x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - state = kmalloc(sizeof(struct tef6862_state), GFP_KERNEL);
> + state = kzalloc(sizeof(struct tef6862_state), GFP_KERNEL);
> if (state == NULL)
> return -ENOMEM;
> state->freq = TEF6862_LO_FREQ;
> diff --git a/drivers/media/video/m52790.c b/drivers/media/video/m52790.c
> index 5e1c9a8..303ffa7 100644
> --- a/drivers/media/video/m52790.c
> +++ b/drivers/media/video/m52790.c
> @@ -174,7 +174,7 @@ static int m52790_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - state = kmalloc(sizeof(struct m52790_state), GFP_KERNEL);
> + state = kzalloc(sizeof(struct m52790_state), GFP_KERNEL);
> if (state == NULL)
> return -ENOMEM;
>
> diff --git a/drivers/media/video/tda9840.c b/drivers/media/video/tda9840.c
> index 5d4cf3b..22fa820 100644
> --- a/drivers/media/video/tda9840.c
> +++ b/drivers/media/video/tda9840.c
> @@ -171,7 +171,7 @@ static int tda9840_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - sd = kmalloc(sizeof(struct v4l2_subdev), GFP_KERNEL);
> + sd = kzalloc(sizeof(struct v4l2_subdev), GFP_KERNEL);
> if (sd == NULL)
> return -ENOMEM;
> v4l2_i2c_subdev_init(sd, client, &tda9840_ops);
> diff --git a/drivers/media/video/tea6415c.c b/drivers/media/video/tea6415c.c
> index 19621ed..827425c 100644
> --- a/drivers/media/video/tea6415c.c
> +++ b/drivers/media/video/tea6415c.c
> @@ -152,7 +152,7 @@ static int tea6415c_probe(struct i2c_client *client,
>
> v4l_info(client, "chip found @ 0x%x (%s)\n",
> client->addr << 1, client->adapter->name);
> - sd = kmalloc(sizeof(struct v4l2_subdev), GFP_KERNEL);
> + sd = kzalloc(sizeof(struct v4l2_subdev), GFP_KERNEL);
> if (sd == NULL)
> return -ENOMEM;
> v4l2_i2c_subdev_init(sd, client, &tea6415c_ops);
> diff --git a/drivers/media/video/tea6420.c b/drivers/media/video/tea6420.c
> index 5ea8404..f350b6c 100644
> --- a/drivers/media/video/tea6420.c
> +++ b/drivers/media/video/tea6420.c
> @@ -125,7 +125,7 @@ static int tea6420_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - sd = kmalloc(sizeof(struct v4l2_subdev), GFP_KERNEL);
> + sd = kzalloc(sizeof(struct v4l2_subdev), GFP_KERNEL);
> if (sd == NULL)
> return -ENOMEM;
> v4l2_i2c_subdev_init(sd, client, &tea6420_ops);
> diff --git a/drivers/media/video/upd64031a.c b/drivers/media/video/upd64031a.c
> index f8138c7..1aab96a 100644
> --- a/drivers/media/video/upd64031a.c
> +++ b/drivers/media/video/upd64031a.c
> @@ -230,7 +230,7 @@ static int upd64031a_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - state = kmalloc(sizeof(struct upd64031a_state), GFP_KERNEL);
> + state = kzalloc(sizeof(struct upd64031a_state), GFP_KERNEL);
> if (state == NULL)
> return -ENOMEM;
> sd = &state->sd;
> diff --git a/drivers/media/video/upd64083.c b/drivers/media/video/upd64083.c
> index 28e0e6b..9bbe617 100644
> --- a/drivers/media/video/upd64083.c
> +++ b/drivers/media/video/upd64083.c
> @@ -202,7 +202,7 @@ static int upd64083_probe(struct i2c_client *client,
> v4l_info(client, "chip found @ 0x%x (%s)\n",
> client->addr << 1, client->adapter->name);
>
> - state = kmalloc(sizeof(struct upd64083_state), GFP_KERNEL);
> + state = kzalloc(sizeof(struct upd64083_state), GFP_KERNEL);
> if (state == NULL)
> return -ENOMEM;
> sd = &state->sd;
>


\
 
 \ /
  Last update: 2011-04-02 10:09    [W:0.047 / U:3.620 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site