greybus: interface: fix potential use-after-free at remove
authorJohan Hovold <johan@hovoldconsulting.com>
Wed, 11 Nov 2015 09:07:05 +0000 (10:07 +0100)
committerGreg Kroah-Hartman <gregkh@google.com>
Wed, 11 Nov 2015 17:18:28 +0000 (09:18 -0800)
Fix resources (accessible through sysfs) being released before interface
is deregistered.

Signed-off-by: Johan Hovold <johan@hovoldconsulting.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
drivers/staging/greybus/interface.c

index 275a8c7..e496b16 100644 (file)
@@ -60,6 +60,9 @@ static void gb_interface_release(struct device *dev)
 {
        struct gb_interface *intf = to_gb_interface(dev);
 
+       kfree(intf->product_string);
+       kfree(intf->vendor_string);
+
        kfree(intf);
 }
 
@@ -191,9 +194,6 @@ void gb_interface_remove(struct gb_interface *intf)
        list_for_each_entry_safe(bundle, next, &intf->bundles, links)
                gb_bundle_destroy(bundle);
 
-       kfree(intf->product_string);
-       kfree(intf->vendor_string);
-
        module = intf->module;
        device_unregister(&intf->dev);
        put_device(&module->dev);