]> asedeno.scripts.mit.edu Git - linux.git/commit
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: afbb110) | patch
[media] lirc: use-after free while reading from device and unplugging
authorSean Young <sean@mess.org>
Mon, 31 Oct 2016 17:52:27 +0000 (15:52 -0200)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Mon, 21 Nov 2016 15:28:11 +0000 (13:28 -0200)
commitc77d17c0985a70fa3cd2ecde1e4f4be0dd5e9e12
treef5464ed1bb40b45dfb28e417cefde361bc000af1tree | snapshot
parentafbb110172b93e44a3fd1b5afb3a71f7f9da4406commit | diff
[media] lirc: use-after free while reading from device and unplugging

Many lirc drivers have their own receive buffers which are freed on
unplug (e.g. ir_lirc_unregister). This means that ir->buf->wait_poll
will be freed directly after unplug so do not remove yourself from the
wait queue.

Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/rc/lirc_dev.c diff | blob | history
local clone of linux.git