]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1ea1742) | patch
[media] lirc: use-after free while reading from device and unplugging
authorSean Young <sean@mess.org>
Mon, 31 Oct 2016 17:52:27 +0000 (15:52 -0200)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Mon, 21 Nov 2016 15:28:11 +0000 (13:28 -0200)
commit3a5269ed35d9965018583f2cbd603066e6f59e9b
treef5464ed1bb40b45dfb28e417cefde361bc000af1tree | snapshot
parent1ea174220bbcc69b7df2953224dd848bc4909a7bcommit | diff
[media] lirc: use-after free while reading from device and unplugging

Many lirc drivers have their own receive buffers which are freed on
unplug (e.g. ir_lirc_unregister). This means that ir->buf->wait_poll
will be freed directly after unplug so do not remove yourself from the
wait queue.

Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/rc/lirc_dev.c diff | blob | history
Linux Kernel Source Tree.