diff options
| author | Sven Van Asbroeck <thesven73@gmail.com> | 2019-03-10 14:58:24 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-05-16 09:17:22 +0200 |
| commit | b8f6da2fcb2e555c4d8a2572e18d44b631d3eaad (patch) | |
| tree | 68bb6a496f06ac7e2551b4cbba445c9fad15c177 /drivers/hid/hid-input.c | |
| parent | 23a030f79c350f2f9a11a940644d9944b04fab9e (diff) | |
iio: adc: xilinx: fix potential use-after-free on remove
[ Upstream commit 62039b6aef63380ba7a37c113bbaeee8a55c5342 ]
When cancel_delayed_work() returns, the delayed work may still
be running. This means that the core could potentially free
the private structure (struct xadc) while the delayed work
is still using it. This is a potential use-after-free.
Fix by calling cancel_delayed_work_sync(), which waits for
any residual work to finish before returning.
Signed-off-by: Sven Van Asbroeck <TheSven73@gmail.com>
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers/hid/hid-input.c')
0 files changed, 0 insertions, 0 deletions