Revision 963761a0b2e85663ee4a5630f72930885a06598a authored by Sean Young on 24 May 2017, 09:24:51 UTC, committed by Mauro Carvalho Chehab on 04 June 2017, 18:25:38 UTC
A rc device can call ir_raw_event_handle() after rc_allocate_device(),
but before rc_register_device() has completed. This is racey because
rcdev->raw is set before rcdev->raw->thread has a valid value.

Cc: stable@kernel.org
Reported-by: kbuild test robot <fengguang.wu@intel.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
1 parent 20249f8
History
File Mode Size
ac97
ali5451
asihpi
au88x0
aw2
ca0106
cs46xx
cs5535audio
ctxfi
echoaudio
emu10k1
hda
ice1712
korg1212
lola
lx6464es
mixart
nm256
oxygen
pcxhr
riptide
rme9652
trident
vx222
ymfpci
Kconfig -rw-r--r-- 25.1 KB
Makefile -rw-r--r-- 2.1 KB
ad1889.c -rw-r--r-- 25.9 KB
ad1889.h -rw-r--r-- 7.9 KB
ak4531_codec.c -rw-r--r-- 17.0 KB
als300.c -rw-r--r-- 21.8 KB
als4000.c -rw-r--r-- 30.9 KB
atiixp.c -rw-r--r-- 45.1 KB
atiixp_modem.c -rw-r--r-- 35.2 KB
azt3328.c -rw-r--r-- 82.3 KB
azt3328.h -rw-r--r-- 15.5 KB
bt87x.c -rw-r--r-- 29.6 KB
cmipci.c -rw-r--r-- 101.3 KB
cs4281.c -rw-r--r-- 63.8 KB
cs5530.c -rw-r--r-- 7.0 KB
ens1370.c -rw-r--r-- 78.4 KB
ens1371.c -rw-r--r-- 38 bytes
es1938.c -rw-r--r-- 54.6 KB
es1968.c -rw-r--r-- 78.7 KB
fm801.c -rw-r--r-- 41.4 KB
intel8x0.c -rw-r--r-- 91.8 KB
intel8x0m.c -rw-r--r-- 37.1 KB
maestro3.c -rw-r--r-- 81.7 KB
rme32.c -rw-r--r-- 57.1 KB
rme96.c -rw-r--r-- 70.7 KB
sis7019.c -rw-r--r-- 39.6 KB
sis7019.h -rw-r--r-- 13.3 KB
sonicvibes.c -rw-r--r-- 50.9 KB
via82xx.c -rw-r--r-- 77.0 KB
via82xx_modem.c -rw-r--r-- 34.0 KB

back to top