[media] tm6000: fix vbuf may be used uninitialized
authorJarod Wilson <jarod@redhat.com>
Mon, 11 Apr 2011 21:49:24 +0000 (18:49 -0300)
committerMauro Carvalho Chehab <mchehab@redhat.com>
Fri, 20 May 2011 12:27:42 +0000 (09:27 -0300)
In commit 8aff8ba95155df, most of the manipulations to vbuf inside
copy_streams were gated on if !dev->radio, but one place that touches
vbuf lays outside those gates -- a memcpy of vbuf isn't NULL. If we
initialize vbuf to NULL, that memcpy will never happen in the case where
we do have dev->radio, and otherwise, in the !dev->radio case, the code
behaves exactly like it did prior to 8aff8ba95155df.

While we're at it, also fix an incorrectly indented closing brace for
one of the sections touching vbuf that is conditional on !dev->radio.

Signed-off-by: Jarod Wilson <jarod@redhat.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
drivers/staging/tm6000/tm6000-video.c

index 17db6684abbed34be3729b6fdecc5c9c38ec33aa..f82edfaac522f9c9596d27f457aefb4cfe680fd0 100644 (file)
@@ -228,7 +228,7 @@ static int copy_streams(u8 *data, unsigned long len,
        unsigned long header = 0;
        int rc = 0;
        unsigned int cmd, cpysize, pktsize, size, field, block, line, pos = 0;
-       struct tm6000_buffer *vbuf;
+       struct tm6000_buffer *vbuf = NULL;
        char *voutp = NULL;
        unsigned int linewidth;
 
@@ -318,7 +318,7 @@ static int copy_streams(u8 *data, unsigned long len,
                                        if (pos + size > vbuf->vb.size)
                                                cmd = TM6000_URB_MSG_ERR;
                                        dev->isoc_ctl.vfield = field;
-                       }
+                               }
                                break;
                        case TM6000_URB_MSG_VBI:
                                break;