)]}'
{
  "commit": "672dcd54774ea1b03da8f2baa1cdbf827927fc85",
  "tree": "051843ebf49c9437e740b7f271554ffdebf8e52f",
  "parents": [
    "46b633779b299c7fb3d78f153a5034055f99cd45"
  ],
  "author": {
    "name": "Hans Verkuil",
    "email": "hverkuil@xs4all.nl",
    "time": "Tue Jan 11 17:48:21 2011 -0300"
  },
  "committer": {
    "name": "Mauro Carvalho Chehab",
    "email": "mchehab@redhat.com",
    "time": "Wed Jan 19 11:52:14 2011 -0200"
  },
  "message": "[media] v4l2-device: fix \u0027use-after-freed\u0027 oops\n\nFix a bug in v4l2_device_unregister where the sd pointer can be dereferenced\nafter it was freed.\n\nNormally the i2c adapter is removed before this function is called. Removing\nthe adapter will also unregister all subdevs on that adapter, so generally\nv4l2_device_unregister has nothing to do. However, in the case of a platform\ni2c bus that bus is generally not freed.\n\nIn that case, after freeing the i2c subdevice the code will fall into the\nsecond block when it tests if the subdev is a SPI device. But by that time\nthe subdev is already freed and the kernel oopses.\n\nThe fix is trivial: continue with the loop after freeing the i2c or spi\nsubdevice.\n\nSigned-off-by: Hans Verkuil \u003chverkuil@xs4all.nl\u003e\nReported-by: Daniel Drake \u003cdsd@laptop.org\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b24f002ffa6794ad1197479802eb4085dc85d096",
      "old_mode": 33188,
      "old_path": "drivers/media/video/v4l2-device.c",
      "new_id": "ce64fe16bc604137d3522af06931ab562983865c",
      "new_mode": 33188,
      "new_path": "drivers/media/video/v4l2-device.c"
    }
  ]
}