mirror of
https://github.com/torvalds/linux.git
synced 2024-12-30 23:02:08 +00:00
8ae2f2b0a2
When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtp_dev. If ish_probe() fails, the devm-managed device resources including ishtp_dev are freed, but the work is not cancelled, causing a use-after-free when the work function tries to access ishtp_dev. Use devm_work_autocancel() instead, so that the work is automatically cancelled if probe fails. Signed-off-by: Reka Norman <rekanorman@chromium.org> Acked-by: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com> Signed-off-by: Jiri Kosina <jkosina@suse.cz> |
||
|---|---|---|
| .. | ||
| ipc | ||
| ishtp | ||
| ishtp-fw-loader.c | ||
| ishtp-hid-client.c | ||
| ishtp-hid.c | ||
| ishtp-hid.h | ||
| Kconfig | ||
| Makefile | ||