From: Kirill Tkhai <tkhai@yandex.ru>
Date: Thu, 17 Apr 2014 20:47:04 +0000 (-0300)
Subject: [media] s2255: Do not free fw_data until timer handler has actually stopped using it
X-Git-Tag: omap-for-v3.16/fixes-against-rc1~25^2~155
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9f6be2bc403c0cea8d7b72cd5d42bd1a22b369ed;p=pandora-kernel.git

[media] s2255: Do not free fw_data until timer handler has actually stopped using it

Function del_timer() does not guarantee that timer was really deleted.
If the timer handler is beeing executed at the moment, the function
does nothing. So, we have a race between del_timer() and kfree(), and
it's possible to use already freed memory in the handler.

Signed-off-by: Kirill Tkhai <tkhai@yandex.ru>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
---

Reading git-diff-tree failed