linux-next

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git synced 2025-01-09 15:29:16 +00:00

History

William Breathitt Gray 663d8fb0f8 counter: 104-quad-8: Fix use-after-free by quad8_irq_handler

On unbind an irq might be pending which results in quad8_irq_handler()
calling counter_push_event() for a counter that is already unregistered.
This patch fixes that situation by passing the struct counter_device dev
to devm_request_irq() rather than the parent's so that the irq handler
is cleaned before the counter is unregistered.

Fixes: 7aa2ba0df651 ("counter: 104-quad-8: Add IRQ support for the ACCES 104-QUAD-8")
Cc: Syed Nayyar Waris <syednwaris@gmail.com>
Reported-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
Signed-off-by: William Breathitt Gray <vilhelm.gray@gmail.com>
Link: https://lore.kernel.org/r/20220105093052.258791-1-vilhelm.gray@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-01-06 15:51:13 +01:00

104-quad-8.c

counter: 104-quad-8: Fix use-after-free by quad8_irq_handler

2022-01-06 15:51:13 +01:00

counter-chrdev.c

counter: Fix use-after-free race condition for events_queue_size write

2021-10-21 13:02:47 +02:00

counter-chrdev.h

counter: Add character device interface

2021-10-17 10:53:52 +01:00

counter-core.c

counter: remove old and now unused registration API