Lin Ma 0fc044b2b5 media: dvbdev: adopts refcnt to avoid UAF ... dvb_unregister_device() is known that prone to use-after-free. That is, the cleanup from dvb_unregister_device() releases the dvb_device even if there are pointers stored in file->private_data still refer to it. This patch adds a reference counter into struct dvb_device and delays its deallocation until no pointer refers to the object. Link: https://lore.kernel.org/linux-media/20220807145952.10368-1-linma@zju.edu.cn Signed-off-by: Lin Ma <linma@zju.edu.cn> Reported-by: kernel test robot <lkp@intel.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>		2022-11-25 10:08:23 +00:00
..
davinci	media: davinci/vpbe: Fix a typo ("defualt_mode")	2022-11-04 16:56:47 +01:00
drv-intf	media: saa7146: deprecate hexium_gemini/orion, mxb and ttpci	2022-08-29 16:46:38 +02:00
i2c	media: ov9650: Drop platform data code path	2022-10-27 14:48:55 +03:00
tpg	media: v4l2-tpg: add HDMI Video Guard Band test pattern	2022-06-20 10:30:30 +01:00
cec-notifier.h
cec-pin.h
cec.h	media: cec-adap.c: drop activate_cnt, use state info instead	2022-05-13 11:29:39 +02:00
demux.h
dmxdev.h	media: dmxdev: drop unneeded <linux/kernel.h> inclusion from other headers	2021-12-14 16:19:04 +01:00
dvb_ca_en50221.h
dvb_demux.h
dvb_frontend.h	media: media dvb_frontend: add suspend and resume callbacks to dvb_frontend_ops	2021-11-19 15:57:22 +00:00
dvb_math.h
dvb_net.h
dvb_ringbuffer.h	media: dvb_ringbuffer: Fix typo in dvb_ringbuffer_pkt_write() kerneldoc	2022-11-25 09:45:47 +00:00
dvb_vb2.h
dvb-usb-ids.h	media: dvb-usb: dib0700_devices: use an enum for the device number	2022-04-18 07:36:44 +02:00
dvbdev.h	media: dvbdev: adopts refcnt to avoid UAF	2022-11-25 10:08:23 +00:00
frame_vector.h	media: videobuf2: Move frame_vector into media subsystem	2021-01-12 14:15:31 +01:00
imx.h
media-dev-allocator.h	media: Fix Media Controller API config checks	2021-06-24 14:26:00 +02:00
media-device.h	media: mc: entity: Merge media_entity_enum_init and __media_entity_enum_init	2022-09-24 09:10:38 +02:00
media-devnode.h	media: media-devnode.h: drop duplicated word in comment	2020-07-19 14:00:12 +02:00
media-entity.h	media: Fix documentation typos in media-entity.h	2022-10-25 10:37:03 +03:00
media-request.h
mipi-csi2.h	media: Add MIPI CSI-2 28 bits per pixel raw data type	2022-05-17 09:17:26 +02:00
rc-core.h	media: rc-core: rename ir_raw_event_reset to ir_raw_event_overflow	2022-01-28 19:32:50 +01:00
rc-map.h	media: rc: add keymap for Toshiba CT-90405 remote	2021-06-08 15:56:58 +02:00
rcar-fcp.h
tuner-types.h
tuner.h	Linux 5.15-rc4	2021-10-04 07:52:13 +02:00
tveeprom.h
v4l2-async.h	media: v4l2-async: Add notifier operation to destroy asd instances	2022-07-17 11:20:08 +01:00
v4l2-common.h	media fixes for v6.1-rc2	2022-10-22 15:30:15 -07:00
v4l2-ctrls.h	media: v4l2-ctrls: drop 'elems' argument from control type ops.	2022-09-24 08:49:06 +02:00
v4l2-dev.h	media: mc: convert pipeline funcs to take media_pad	2022-09-24 09:22:30 +02:00
v4l2-device.h	media: fix kernel-doc markups	2020-11-16 10:31:16 +01:00
v4l2-dv-timings.h	media: fix kernel-doc markups	2020-11-16 10:31:16 +01:00
v4l2-event.h	media: v4l2-dev/event: add v4l2_event_wake_all()	2021-01-04 13:14:25 +01:00
v4l2-fh.h
v4l2-flash-led-class.h
v4l2-fwnode.h	media: Remove incorrect comment from struct v4l2_fwnode_endpoint	2022-09-24 09:06:49 +02:00
v4l2-h264.h	media: h264: Sort p/b reflist using frame_num	2022-05-17 10:02:29 +02:00
v4l2-image-sizes.h
v4l2-ioctl.h	media: v4l2: prepare compat-ioctl rework	2020-11-16 10:31:05 +01:00
v4l2-jpeg.h	media: Add parsing for APP14 data segment in jpeg helpers	2021-03-22 10:35:36 +01:00
v4l2-mc.h	media: v4l2-mc: Add link flags to v4l2_create_fwnode_links_to_pad()	2021-03-11 11:59:52 +01:00
v4l2-mediabus.h	media: media/v4l2-core: Add enum V4L2_FWNODE_BUS_TYPE_DPI	2022-05-17 09:09:59 +02:00
v4l2-mem2mem.h	media: media/v4l2-mem2mem.h: rename 'videobuf' to 'vb2'	2022-08-29 15:47:03 +02:00
v4l2-rect.h	media: v4l2-rect.h: add enclosed rectangle helper	2020-07-04 12:29:38 +02:00
v4l2-subdev.h	v4l: subdev: Warn if disabling streaming failed, return success	2022-10-27 14:38:03 +03:00
v4l2-uvc.h	media: uvcvideo: move uvc_format_desc to common header	2022-09-22 15:52:30 +02:00
v4l2-vp9.h	media: Add VP9 v4l2 library	2021-11-22 07:47:13 +00:00
videobuf2-core.h	media: vb2: add (un)prepare_streaming queue ops	2022-11-25 07:39:46 +00:00
videobuf2-dma-contig.h
videobuf2-dma-sg.h
videobuf2-dvb.h	media: vb2: videobuf -> videobuf2	2022-08-29 15:38:09 +02:00
videobuf2-memops.h
videobuf2-v4l2.h	media: videobuf2: Remove vb2_find_timestamp()	2022-08-30 14:44:45 +02:00
videobuf2-vmalloc.h
videobuf-core.h
videobuf-dma-contig.h
videobuf-dma-sg.h	media: videobuf-dma-sg: number of pages should be unsigned long	2020-09-03 11:12:20 +02:00
videobuf-vmalloc.h
vsp1.h	media: vsp1: Add premultiplied alpha support	2022-09-07 23:48:39 +03:00