From nobody Fri Sep 25 02:43:45 2026 Received: from cstnet.cn (smtp25.cstnet.cn [159.226.251.25]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1F9854BE450; Thu, 17 Sep 2026 10:13:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=159.226.251.25 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789640037; cv=none; b=SqkaXCX2nTwJEx7CikgSigP+uWtGTNsDSkqtzFvlyztg4Yk5uu4qoLUPtgAMBkx3MNOGYkGX97HAzAgGff2hNxzPDdeqNUw+C1F3tkPBQwYK2JgAQPHApBTfLL1mFDZupTQfdFEjZj380jDsZOxv8A8w92la2xVnDzgyjI90bLk= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789640037; c=relaxed/simple; bh=rDdQgX93Xjq8J3/x9FLPLO3fgCVAZm2SRka08WNratg=; h=From:To:Cc:Subject:Date:Message-Id:MIME-Version; b=UbWHcq9RpkufoJExH+Rq9wT0GkPZxNw0HhEKU2K/IUw0fgK0VEEoFNPGqXa35NWeS79n5Zdtq/mr2vqdqq21ygvxlfAwRphmr1aKJsxqXZssNfiuUGNFtbQ4wl9Ro5D0IFvNg2b0jNhW6NolzREB9xG0dFGiTEyBcj2fIN+aakY= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=iscas.ac.cn; spf=pass smtp.mailfrom=iscas.ac.cn; arc=none smtp.client-ip=159.226.251.25 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=iscas.ac.cn Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=iscas.ac.cn Received: from dfae2b116770.home.arpa (unknown [36.110.52.2]) by APP-05 (Coremail) with SMTP id zQCowAA3oDpbvatqZmR+CA--.338S2; Thu, 17 Sep 2026 18:13:47 +0800 (CST) From: Wentao Liang To: brijesh.j@ti.com Cc: chaithrika@ti.com, hverkuil@kernel.org, linux-kernel@vger.kernel.org, linux-media@vger.kernel.org, mchehab@kernel.org, mrh@ti.com, prabhakar.csengg@gmail.com, Wentao Liang , stable@vger.kernel.org Subject: [PATCH] media: vpif_display: Fix i2c adapter reference leak in vpif_probe() Date: Thu, 17 Sep 2026 10:13:47 +0000 Message-Id: <20260917101347.2146298-1-vulab@iscas.ac.cn> X-Mailer: git-send-email 2.34.1 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-CM-TRANSID: zQCowAA3oDpbvatqZmR+CA--.338S2 X-Coremail-Antispam: 1UD129KBjvJXoW7CrykKw15Ww1fWr4xKw43GFg_yoW8JFyDpF 4qkF4akrWYqF40qF48JF1ruFW3Kw4rtayakFyIk34xu39xXFyxA34ruFW3tF1UJFZ5Ja43 JFn8t3y5XFyj9r7anT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUPvb7Iv0xC_KF4lb4IE77IF4wAFc2x0x2IEx4CE42xK8VAvwI8I cIk0rVWrJVCq3wAFIxvE14AKwVWUJVWUGwA2ocxC64kIII0Yj41l84x0c7CEw4AK67xGY2 AK021l84ACjcxK6xIIjxv20xvE14v26ryj6F1UM28EF7xvwVC0I7IYx2IY6xkF7I0E14v2 6F4j6r4UJwA2z4x0Y4vEx4A2jsIE14v26rxl6s0DM28EF7xvwVC2z280aVCY1x0267AKxV W0oVCq3wAS0I0E0xvYzxvE52x082IY62kv0487Mc02F40EFcxC0VAKzVAqx4xG6I80ewAv 7VC0I7IYx2IY67AKxVWUAVWUtwAv7VC2z280aVAFwI0_Gr1j6F4UJwAm72CE4IkC6x0Yz7 v_Jr0_Gr1lF7xvr2IYc2Ij64vIr41lF7I21c0E0s8F02x267IIx4CEVc8vx2IErcIFxwAC I402YVCY1x02628vn2kIc2xKxwCY1x0262kKe7AKxVWUtVW8ZwCF04k20xvY0x0EwIxGrw CF04k20xvE74AGY7Cv6cx26r48ZrWUJr1UMxC20s026xCaFVCjc4AY6r1j6r4UMI8I3I0E 5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF67AKxVWUtV W8ZwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1I6r4UMIIF0xvE2Ix0cI8IcVCY 1x0267AKxVWxJVW8Jr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvEx4A2jsIE14 v26r4UJVWxJr1lIxAIcVC2z280aVCY1x0267AKxVW0oVCq3bIYCTnIWIevJa73UjIFyTuY vjxU7WE_DUUUU X-CM-SenderInfo: pyxotu46lvutnvoduhdfq/1tbiBwcNA2qrrRk8tgAAsx Content-Type: text/plain; charset="utf-8" vpif_probe() takes a reference to the i2c adapter with i2c_get_adapter() and passes it to v4l2_i2c_new_subdev_board(), which does not consume it, but the reference is never released, so it is leaked both when the probe succeeds and when it fails after the adapter has been acquired. Release the reference with i2c_put_adapter() on the success path and in the probe_subdev_out cleanup. Fixes: e7332e3a552f ("V4L/DVB (12176): davinci/vpif_display: Add VPIF displ= ay driver") Cc: stable@vger.kernel.org Signed-off-by: Wentao Liang --- drivers/media/platform/ti/davinci/vpif_display.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/media/platform/ti/davinci/vpif_display.c b/drivers/med= ia/platform/ti/davinci/vpif_display.c index 08877ae1513a..8bea1de6ccc8 100644 --- a/drivers/media/platform/ti/davinci/vpif_display.c +++ b/drivers/media/platform/ti/davinci/vpif_display.c @@ -1289,9 +1289,12 @@ static int vpif_probe(struct platform_device *pdev) if (err) goto probe_subdev_out; =20 + i2c_put_adapter(i2c_adap); + return 0; =20 probe_subdev_out: + i2c_put_adapter(i2c_adap); kfree(vpif_obj.sd); vpif_unregister: v4l2_device_unregister(&vpif_obj.v4l2_dev); --=20 2.34.1