a3d5fcc6cf
[ Upstream commit c6a502c2299941c8326d029cfc8a3bc8a4607ad5 ]
dsp_pipeline_build() allocates dup pointer by kstrdup(cfg),
but then it updates dup variable by strsep(&dup, "|").
As a result when it calls kfree(dup), the dup variable contains NULL.
Found by Linux Driver Verification project (linuxtesting.org) with SVACE.
Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| clock.c | ||
| core.c | ||
| core.h | ||
| dsp.h | ||
| dsp_audio.c | ||
| dsp_biquad.h | ||
| dsp_blowfish.c | ||
| dsp_cmx.c | ||
| dsp_core.c | ||
| dsp_dtmf.c | ||
| dsp_ecdis.h | ||
| dsp_hwec.c | ||
| dsp_hwec.h | ||
| dsp_pipeline.c | ||
| dsp_tones.c | ||
| fsm.c | ||
| fsm.h | ||
| hwchannel.c | ||
| l1oip.h | ||
| l1oip_codec.c | ||
| l1oip_core.c | ||
| layer1.c | ||
| layer1.h | ||
| layer2.c | ||
| layer2.h | ||
| socket.c | ||
| stack.c | ||
| tei.c | ||
| timerdev.c | ||