![]() We have a double-free bug in sound/usb/6fire/firmware.c::usb6fire_fw_ezusb_upload(). We already call release_firmware(fw) on line 258, so when we then do it again after usb6fire_fw_ezusb_write() returns <0, we have a double-free. Easily fixed by just removing the last call to release_firmware(). Signed-off-by: Jesper Juhl <jj@chaosbits.net> Signed-off-by: Takashi Iwai <tiwai@suse.de> |
||
---|---|---|
.. | ||
chip.c | ||
chip.h | ||
comm.c | ||
comm.h | ||
common.h | ||
control.c | ||
control.h | ||
firmware.c | ||
firmware.h | ||
Makefile | ||
midi.c | ||
midi.h | ||
pcm.c | ||
pcm.h |