There are double free in rpmsg_probe() and rpmsg_virtio_add_ctrl_dev().
In addition, rpmsg_virtio_del_ctrl_dev() didn't use correct function
to free the object.

v2:
Use a cover letter to integrate the three patches.
Add comments in rpmsg_probe() and rpmsg_virtio_add_ctrl_dev().


Hangyu Hua (2):
  rpmsg: virtio: fix possible double free in rpmsg_probe()
  rpmsg: virtio: fix possible double free in rpmsg_virtio_add_ctrl_dev()
Arnaud Pouliquen (1):
  rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl

 drivers/rpmsg/virtio_rpmsg_bus.c | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

-- 
2.25.1