From: Matthias Kaehlcke Videopix Frame Grabber: vfc_debug() doesn't release the device lock when copy_from_user() fails Signed-off-by: Matthias Kaehlcke Signed-off-by: Andrew Morton --- drivers/sbus/char/vfc_dev.c | 1 + 1 files changed, 1 insertion(+) diff -puN drivers/sbus/char/vfc_dev.c~videopix-frame-grabber-fix-unreleased-lock-in-vfc_debug drivers/sbus/char/vfc_dev.c --- a/drivers/sbus/char/vfc_dev.c~videopix-frame-grabber-fix-unreleased-lock-in-vfc_debug +++ a/drivers/sbus/char/vfc_dev.c @@ -248,6 +248,7 @@ static int vfc_debug(struct vfc_dev *dev buffer,inout.len); if (copy_to_user(argp,&inout,sizeof(inout))) { + vfc_unlock_device(dev); kfree(buffer); return -EFAULT; } _