Re: [PATCH] HID: hid-input: Fix accessing freed memory during driver unbind
From: Jiri Kosina <hidden>
Date: 2015-07-29 13:07:08
Also in:
linux-input, lkml, stable
On Tue, 28 Jul 2015, Krzysztof Kozlowski wrote:
During unbinding the driver was dereferencing a pointer to memory
already freed by power_supply_unregister().
Driver was freeing its internal description of battery through pointers
stored in power_supply structure. However, because the core owns the
power supply instance, after calling power_supply_unregister() the
driver cannot access these members.
Fix this by using resource-managed allocations so internal data will be
freed by pointers stored in resource-managed core.
Signed-off-by: Krzysztof Kozlowski <redacted>
Reported-by: H.J. Lu <redacted>
Fixes: 297d716f6260 ("power_supply: Change ownership from driver to core")
Cc: <redacted>Applied to for-4.2/upstream-fixes, thanks. -- Jiri Kosina SUSE Labs