David Woodhouse
1c39858b5d
Fix use-after-free oops in Bluetooth HID.
...
When cleaning up HIDP sessions, we currently close the ACL connection
before deregistering the input device. Closing the ACL connection
schedules a workqueue to remove the associated objects from sysfs, but
the input device still refers to them -- and if the workqueue happens to
run before the input device removal, the kernel will oops when trying to
look up PHYSDEVPATH for the removed input device.
Fix this by deregistering the input device before closing the
connections.
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-07-07 12:22:37 -07:00
..
802
[NET]: cleanup extra semicolons
2007-04-25 22:29:24 -07:00
8021q
[NET]: Fix comparisons of unsigned < 0.
2007-06-03 18:08:47 -07:00
appletalk
header cleaning: don't include smp_lock.h when not used
2007-05-08 11:15:07 -07:00
atm
[NET]: SPIN_LOCK_UNLOCKED cleanup in drivers/atm, net
2007-04-26 01:37:44 -07:00
ax25
[S390] Kconfig: unwanted menus for s390.
2007-05-10 15:46:07 +02:00
bluetooth
Fix use-after-free oops in Bluetooth HID.
2007-07-07 12:22:37 -07:00
bridge
[BRIDGE]: Round off STP perodic timers.
2007-05-31 01:23:39 -07:00
core
[NETPOLL]: Fixups for 'fix soft lockup when removing module'
2007-07-05 17:42:44 -07:00
dccp
[NET]: Fix comparisons of unsigned < 0.
2007-06-03 18:08:47 -07:00
decnet
[NETLINK]: Mark netlink policies const
2007-06-07 13:40:10 -07:00
econet
[SK_BUFF]: Convert skb->tail to sk_buff_data_t
2007-04-25 22:26:28 -07:00
ethernet
[SK_BUFF]: Introduce skb_reset_mac_header(skb)
2007-04-25 22:24:32 -07:00
ieee80211
[PATCH] softmac: alloc_ieee80211() NULL check
2007-05-29 11:16:35 -04:00
ipv4
[TCP] tcp_read_sock: Allow recv_actor() return return negative error value.
2007-06-23 23:07:50 -07:00
ipv6
[IPV6] NDISC: Fix thinko to control Router Preference support.
2007-06-22 16:07:04 -07:00
ipx
Fix incorrect prototype for ipxrtr_route_packet()
2007-05-17 05:25:49 -07:00
irda
[IrDA]: f-timer reloading when sending rejected frames.
2007-06-08 19:15:56 -07:00
iucv
Add suspend-related notifications for CPU hotplug
2007-05-09 12:30:56 -07:00
key
xfrm: Add security check before flushing SAD/SPD
2007-06-07 13:42:46 -07:00
lapb
[PATCH] remove many unneeded #includes of sched.h
2007-02-14 08:09:54 -08:00
llc
Fix occurrences of "the the "
2007-05-09 08:57:56 +02:00
mac80211
[PATCH] mac80211: Don't stop tx queue on master device while scanning.
2007-06-11 20:29:11 -04:00
netfilter
[NETFILTER]: nf_conntrack_h323: add checking of out-of-range on choices' index values
2007-07-05 17:40:23 -07:00
netlabel
[NetLabel]: consolidate the struct socket/sock handling to just struct sock
2007-06-08 13:33:09 -07:00
netlink
[NETLINK]: Mark netlink policies const
2007-06-07 13:40:10 -07:00
netrom
[NET]: Rework dev_base via list_head (v3)
2007-05-03 15:13:45 -07:00
packet
[AF_PACKET]: Kill CONFIG_PACKET_SOCKET.
2007-05-31 01:23:32 -07:00
rfkill
[RFKILL]: Fix check for correct rfkill allocation
2007-05-19 12:24:39 -07:00
rose
[NET]: Rework dev_base via list_head (v3)
2007-05-03 15:13:45 -07:00
rxrpc
[AF_RXRPC]: Return the number of bytes buffered in rxrpc_send_data()
2007-06-18 23:30:41 -07:00
sched
[NET_SCHED]: Fix filter double free
2007-06-07 13:41:05 -07:00
sctp
SCTP: Add scope_id validation for link-local binds
2007-07-05 17:40:15 -07:00
sunrpc
Merge branch 'master' of /home/trondmy/repositories/git/linux-2.6/
2007-05-17 11:36:59 -04:00
tipc
[TIPC]: Fix infinite loop in netlink handler
2007-06-23 22:59:40 -07:00
unix
[AF_UNIX]: Fix stream recvmsg() race.
2007-06-07 13:40:44 -07:00
wanrouter
[NET]: Fix comparisons of unsigned < 0.
2007-06-03 18:08:47 -07:00
wireless
[PATCH] cfg80211: fix signed macaddress in sysfs
2007-06-11 17:47:41 -04:00
x25
header cleaning: don't include smp_lock.h when not used
2007-05-08 11:15:07 -07:00
xfrm
[XFRM]: Fix MTU calculation for non-ESP SAs
2007-06-18 22:30:15 -07:00
compat.c
[NET]: Adding SO_TIMESTAMPNS / SCM_TIMESTAMPNS support
2007-04-25 22:24:21 -07:00
Kconfig
[S390] Kconfig: no wireless on s390.
2007-05-10 15:46:08 +02:00
Makefile
[NET]: rfkill: add support for input key to control wireless radio
2007-05-07 00:34:20 -07:00
nonet.c
[PATCH] Make most file operations structs in fs/ const
2006-03-28 09:16:06 -08:00
socket.c
Remove SLAB_CTOR_CONSTRUCTOR
2007-05-17 05:23:04 -07:00
sysctl_net.c
Remove obsolete #include <linux/config.h>
2006-06-30 19:25:36 +02:00
TUNABLE
Linux-2.6.12-rc2
2005-04-16 15:20:36 -07:00