Re: [PATCH] media: vidtv: fix read after free

Hi Cengiz, Em Mon, 30 Nov 2020 12:28:26 +0300 Cengiz Can escreveu: > `vidtv_channel_si_destroy` function has a call to > `vidtv_psi_pat_table_destroy` that frees Program Association Table. > > However it is followed by a loop that iterates over the count of Program > Map Tables. This

[PATCH] media: vidtv: fix read after free

`vidtv_channel_si_destroy` function has a call to `vidtv_psi_pat_table_destroy` that frees Program Association Table. However it is followed by a loop that iterates over the count of Program Map Tables. This obviously accesses an invalid memory. Eliminate this by making a copy of num_pmt