tree 91537a1b83a67aaa9fd3ff0709ebde701a60248b
parent 218fe9b7ec7f32c10a07539365488d80af7b0084
author Takashi Iwai <tiwai@suse.de> 1575472494 +0100
committer Mark Brown <broonie@kernel.org> 1577231775 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQFHBAABCgAxFiEEreZoqmdXGLWf4p/qJNaLcl1Uh9AFAl4CpZ8THGJyb29uaWVA
 a2VybmVsLm9yZwAKCRAk1otyXVSH0EGtB/9+y4okAWWOvfkg9NMRNTATAtYxREc+
 tOi5tIVkp1IMpkhPzWUOtl7KYv53nz3IPwQPdZCnZozkhqQ4hujgTpixkMQzvJXp
 /vaD9M3XURygZjDqubounapdgwiGtMM9IEADL8FV0KG9f6JPASS5sNhtfosQ29EQ
 V9PFLwkB0TFcP8mtra1bu6PqxAZ6u/OPZeQT1BQ3TC1FL9AybZbKsN1lanb8V82R
 /PZLJg/l9AdJnpvVv34dNGW7kOcYK9SpH8zypKgzLm1gGpRkWbJ07Syo78x4LZwX
 yA2voXv+4QF0HpTA8hD9N3Ur02c907ZUqB6FuervFpLPsiNgjyjNo1TE
 =74hh
 -----END PGP SIGNATURE-----

ASoC: core: Fix access to uninitialized list heads

The error path of soc_new_pcm_runtime() invokes soc_free_pcm_runtime()
that may cause a few problems.  First off, it calls list_del() for
rtd->list that may not be initialized.  Similarly,
snd_soc_pcm_component_free() traverses over the component list that
may not be initialized, either.  Such access to the uninitialized list
head would lead to either a BUG_ON() or a memory corruption.

This patch fixes the access to uninitialized list heads by
initializing the list heads properly at the beginning before those
error paths.

Signed-off-by: Takashi Iwai <tiwai@suse.de>
Reviewed-by: Pierre-Louis Bossart <pierre-louis.bossart@linux.intel.com>
Link: https://lore.kernel.org/r/20191204151454.21643-1-tiwai@suse.de
Signed-off-by: Mark Brown <broonie@kernel.org>