• Jean Delvare's avatar
    V4L/DVB (8955): bttv: Prevent NULL pointer dereference in radio_open · c37396c1
    Jean Delvare authored
    Fix the following crash in the bttv driver:
    
    BUG: unable to handle kernel NULL pointer dereference at 000000000000036c
    IP: [<ffffffffa037860a>] radio_open+0x3a/0x170 [bttv]
    
    This happens because radio_open assumes that all present bttv devices
    have a radio function. If a bttv device without radio and one with
    radio are installed on the same system, and the one without radio is
    registered first, then radio_open checks for the radio device number
    of a bttv device that has no radio function, and this breaks. All we
    have to do to fix it is to skip bttv devices without a radio function.
    Signed-off-by: default avatarJean Delvare <khali@linux-fr.org>
    Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@redhat.com>
    c37396c1
bttv-driver.c 119 KB