]> git.baikalelectronics.ru Git - kernel.git/commit
HID: nintendo: fix rumble worker null pointer deref
authorDaniel J. Ogorchock <djogorchock@gmail.com>
Wed, 13 Jul 2022 20:20:59 +0000 (16:20 -0400)
committerJiri Kosina <jkosina@suse.cz>
Thu, 25 Aug 2022 13:15:17 +0000 (15:15 +0200)
commit9e511393500a3335c76018bce3852ccd8129378b
treedc7971c0d8c3df00467774ef0448d4fd3e2f368c
parent7b37e4cfa528e8b9b057c1adfaf85fdbbf236644
HID: nintendo: fix rumble worker null pointer deref

We can dereference a null pointer trying to queue work to a destroyed
workqueue.

If the device is disconnected, nintendo_hid_remove is called, in which
the rumble_queue is destroyed. Avoid using that queue to defer rumble
work once the controller state is set to JOYCON_CTLR_STATE_REMOVED.

This eliminates the null pointer dereference.

Signed-off-by: Daniel J. Ogorchock <djogorchock@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-nintendo.c