From: George Spelvin Date: Tue, 12 Feb 2013 07:27:20 +0000 (-0500) Subject: pps: Fix a use-after free bug when unregistering a source. X-Git-Tag: v3.9-rc1~125^2~14 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d953e0e837e65ecc1ddaa4f9560f7925878a0de6;p=pandora-kernel.git pps: Fix a use-after free bug when unregistering a source. Remove the cdev from the system (with cdev_del) *before* deallocating it (in pps_device_destruct, called via kobject_put from device_destroy). Also prevent deallocating a device with open file handles. A better long-term fix is probably to remove the cdev from the pps_device entirely, and instead have all devices reference one global cdev. Then the deallocation ordering becomes simpler. But that's more complex and invasive change, so we leave that for later. Signed-off-by: George Spelvin Cc: stable Acked-by: Rodolfo Giometti Signed-off-by: Greg Kroah-Hartman --- Reading git-diff-tree failed