]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0944d15) | patch
[media] lirc: use-after free while reading from device and unplugging
authorSean Young <sean@mess.org>
Mon, 31 Oct 2016 17:52:27 +0000 (15:52 -0200)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Mon, 21 Nov 2016 15:28:11 +0000 (13:28 -0200)
commit2b0eff0a01d5d2f3ba071c0f3e57f4f0614b2d04
treef5464ed1bb40b45dfb28e417cefde361bc000af1tree | snapshot
parent0944d15e9cad901e60827ce57faffad016925ac1commit | diff
[media] lirc: use-after free while reading from device and unplugging

Many lirc drivers have their own receive buffers which are freed on
unplug (e.g. ir_lirc_unregister). This means that ir->buf->wait_poll
will be freed directly after unplug so do not remove yourself from the
wait queue.

Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/rc/lirc_dev.c diff | blob | history
Linux Kernel Source Tree.