media: rc: uevent sysfs file races with rc_unregister_device()
authorSean Young <sean@mess.org>
Sat, 8 Aug 2020 11:19:12 +0000 (13:19 +0200)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Fri, 28 Aug 2020 12:06:35 +0000 (14:06 +0200)
commit4f0835d6677dc69263f90f976524cb92b257d9f4
tree8770fcd8530254e36a605179dee74ae4306b32bf
parent8a30c017c99603b216907c2f7aa22d3afe4137c3
media: rc: uevent sysfs file races with rc_unregister_device()

Only report uevent file contents if device still registered, else we
might read freed memory.

Reported-by: syzbot+ceef16277388d6f24898@syzkaller.appspotmail.com
Cc: Hillf Danton <hdanton@sina.com>
Cc: <stable@vger.kernel.org> # 4.16+
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/rc/rc-main.c