]> asedeno.scripts.mit.edu Git - linux.git/commit
media: dvb: usb: fix use after free in dvb_usb_device_exit
authorOliver Neukum <oneukum@suse.com>
Tue, 30 Apr 2019 13:07:36 +0000 (09:07 -0400)
committerMauro Carvalho Chehab <mchehab+samsung@kernel.org>
Wed, 22 May 2019 19:28:41 +0000 (15:28 -0400)
commit6cf97230cd5f36b7665099083272595c55d72be7
tree6e7d3a901a9f137fceef94a1fae2c43ea926e96b
parent24e4cf770371df6ad49ed873f21618d9878f64c8
media: dvb: usb: fix use after free in dvb_usb_device_exit

dvb_usb_device_exit() frees and uses the device name in that order.
Fix by storing the name in a buffer before freeing it.

Signed-off-by: Oliver Neukum <oneukum@suse.com>
Reported-by: syzbot+26ec41e9f788b3eba396@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
drivers/media/usb/dvb-usb/dvb-usb-init.c