tree 436acbdb72c99952412f454764f2a753d4d1cc43
parent 6f2cfbb6227eb9189ab719cabefe26e62bc90375
author Kees Cook <keescook@google.com> 1455350886 +0300
committer Kees Cook <keescook@google.com> 1457137184 -0800

UPSTREAM: ALSA: usb-audio: avoid freeing umidi object twice

The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
when tearing down the rawmidi interface. So we shouldn't try to free it
in snd_usbmidi_create() after having registered the rawmidi interface.

Found by KASAN.

Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
Acked-by: Clemens Ladisch <clemens@ladisch.de>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>

Bug: 27300729

(cherry picked from commit 07d86ca93db7e5cdf4743564d98292042ec21af7)
Signed-off-by: Kees Cook <keescook@google.com>
Change-Id: I50e3d5dfe02a7e196c7b4ccf58cd7e37cae010e6