| commit | c77d17c0985a70fa3cd2ecde1e4f4be0dd5e9e12 | [log] [tgz] |
|---|---|---|
| author | Sean Young <sean@mess.org> | Mon Oct 31 15:52:27 2016 -0200 |
| committer | Mauro Carvalho Chehab <mchehab@s-opensource.com> | Mon Nov 21 13:28:11 2016 -0200 |
| tree | f5464ed1bb40b45dfb28e417cefde361bc000af1 | |
| parent | afbb110172b93e44a3fd1b5afb3a71f7f9da4406 [diff] |
[media] lirc: use-after free while reading from device and unplugging Many lirc drivers have their own receive buffers which are freed on unplug (e.g. ir_lirc_unregister). This means that ir->buf->wait_poll will be freed directly after unplug so do not remove yourself from the wait queue. Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>