[PATCH] Fixed list_del corruption in videobuf-core.c : videobuf_queue_cancel()

2012-10-05 Thread Andrei Mandychev
If there is a buffer with VIDEOBUF_QUEUED state it won't be deleted properly because the head of queue loses its elements by calling INIT_LIST_HEAD() before videobuf_streamoff(). --- drivers/media/video/omap/omap_vout.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers

Re: [PATCH] Fixed list_del corruption in videobuf-core.c : videobuf_queue_cancel()

2012-10-08 Thread Andrei Mandychev
ioctl+0x540/0x5a0) from [] (sys_ioctl+0x34/0x54) <4>[ 252.661834] [] (sys_ioctl+0x34/0x54) from [] (ret_fast_syscall+0x0/0x30) BR, Andrei On 10/08/2012 04:50 PM, Hiremath, Vaibhav wrote: On Fri, Oct 05, 2012 at 21:14:25, Andrei Mandychev wrote: If there is a buffer with VIDEOBUF_QUEUED state it wo