Re: [PATCH v2] video: fbdev: smscufx: Fixed several use-after-free bugs

2022-10-20 Thread Helge Deller
On 10/21/22 03:15, Hyunwoo Kim wrote: Several types of UAFs can occur when physically removing a USB device. Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is kref_put() that finally calls ufx_free(). This fix prevents multiple UAFs. Signed-off-by: Hyunwo

[PATCH v2] video: fbdev: smscufx: Fixed several use-after-free bugs

2022-10-20 Thread Hyunwoo Kim
Several types of UAFs can occur when physically removing a USB device. Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is kref_put() that finally calls ufx_free(). This fix prevents multiple UAFs. Signed-off-by: Hyunwoo Kim Link: https://lore.kernel.org/lin