Matthias Schwarzott e59eb4adf0 media: cx231xx: fix use-after-free when unregistering the i2c_client for the dvb demod ... Calling i2c_unregister_device for a demod driver destroys the frontend object. Later it is accessed by calling dvb_unregister_frontend and dvb_frontend_detach. In some cases this leads to a general protection fault with this callstack: dvb_unregister_frontend+0x25/0x50 [dvb_core] dvb_fini+0xdb/0x160 [cx231xx_dvb] cx231xx_unregister_extension+0x3d/0xb0 [cx231xx] cx231xx_dvb_unregister+0x10/0x809 [cx231xx_dvb] SyS_delete_module+0x18a/0x240 ? exit_to_usermode_loop+0x7b/0x80 entry_SYSCALL_64_fastpath+0x17/0x98 Signed-off-by: Matthias Schwarzott <zzam@gentoo.org> Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>		2017-08-27 06:33:47 -04:00
..
cec	media: cec: replace pin->cur_value by adap->cec_pin_is_high	2017-08-26 08:35:10 -04:00
common	media: saa7146: constify videobuf_queue_ops structures	2017-08-26 14:29:51 -04:00
dvb-core
dvb-frontends	media: isl6421: add checks for current overflow	2017-08-20 10:20:30 -04:00
firewire
i2c	media: smiapp: check memory allocation failure	2017-08-26 20:15:13 -04:00
mmc
pci	media: cx23885: Fix use-after-free when unregistering the i2c_client for the dvb demod	2017-08-27 06:32:54 -04:00
platform	media: omap3isp: fix uninitialized variable use	2017-08-26 20:14:42 -04:00
radio	media: radio-usb-si4713: make i2c_adapter const	2017-08-26 08:41:29 -04:00
rc	media: rc: rename RC_TYPE_* to RC_PROTO_* and RC_BIT_* to RC_PROTO_BIT_*	2017-08-20 10:02:48 -04:00
spi
tuners
usb	media: cx231xx: fix use-after-free when unregistering the i2c_client for the dvb demod	2017-08-27 06:33:47 -04:00
v4l2-core	media: v4l2-flash-led-class: Create separate sub-devices for indicators	2017-08-26 20:26:35 -04:00
Kconfig	media: rc-core: do not depend on MEDIA_SUPPORT	2017-08-20 09:39:36 -04:00
Makefile
media-device.c
media-devnode.c
media-entity.c