Tag: fa2b30af84e84129b8d4cf955890ad167cc20cf0

ALSA: sound/pci/ctxfi/ctpcm.c: Remove potential for use after free

Author: Julia Lawall <julia@diku.dk> In each function, the value apcm is stored in the private_data field of runtime. At the same time the function ct_atc_pcm_free_substream is stored in the private_free field of the same structure. ct_atc_pcm_free_substream dereferences and ultimately frees the value in the private_data field. But each function can exit in an error case …

Continue reading