[PATCH] dvb: fix access to freed memory

- core: fix access to freed memory when unloading frontend drivers (fix by
  Gerd Knorr)

Signed-off-by: Johannes Stezenbach <js@linuxtv.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>

diff --git a/drivers/media/dvb/dvb-core/dvb_frontend.c b/drivers/media/dvb/dvb-core/dvb_frontend.c
index 63a08f3148de13d891cd36b73420cbca3ebb45cd..2f1cf834817a2596b25e257daa39800131a7d37e 100644 (file)
--- a/drivers/media/dvb/dvb-core/dvb_frontend.c
+++ b/drivers/media/dvb/dvb-core/dvb_frontend.c
@@ -912,8 +912,9 @@ int dvb_unregister_frontend(struct dvb_frontend* fe)
                fe->ops->release(fe);
        else
                printk("dvb_frontend: Demodulator (%s) does not have a release callback!\n", fe->ops->info.name);
-       if (fe->frontend_priv)
-               kfree(fe->frontend_priv);
+       /* fe is invalid now */
+       if (fepriv)
+               kfree(fepriv);
        up (&frontend_mutex);
        return 0;
 }