Mauro Carvalho Chehab a087ce704b
[media] media-device: dynamically allocate struct media_devnode ...
struct media_devnode is currently embedded at struct media_device.
While this works fine during normal usage, it leads to a race
condition during devnode unregister. the problem is that drivers
assume that, after calling media_device_unregister(), the struct
that contains media_device can be freed. This is not true, as it
can't be freed until userspace closes all opened /dev/media devnodes.
In other words, if the media devnode is still open, and media_device
gets freed, any call to an ioctl will make the core to try to access
struct media_device, with will cause an use-after-free and even GPF.
Fix this by dynamically allocating the struct media_devnode and only
freeing it when it is safe.
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com >
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com >
2016-06-15 17:57:24 -03:00
2016-05-27 15:26:11 -07:00
2016-05-05 19:00:40 +01:00
2016-05-27 15:26:11 -07:00
2016-05-25 15:29:21 -07:00
2016-05-24 11:00:20 -07:00
2016-05-26 19:34:26 -07:00
2016-05-13 16:54:59 +02:00
2016-05-19 10:02:26 -07:00
2016-05-20 22:31:33 -07:00
2016-05-27 15:26:11 -07:00
2016-05-19 11:27:09 -07:00
2016-05-27 15:26:11 -07:00
2016-05-18 02:48:37 +02:00
2016-05-27 15:26:11 -07:00
2016-05-20 22:02:55 -07:00
2016-05-03 11:22:10 +09:00
2016-05-27 15:26:11 -07:00
2016-05-17 17:05:30 -07:00
2016-05-04 14:16:49 -04:00
2016-05-20 21:26:15 -07:00
2016-05-27 15:26:11 -07:00
2016-05-27 15:26:11 -07:00
2016-05-17 12:42:27 +02:00
2016-05-09 22:45:18 +02:00
2016-05-01 09:23:14 -07:00
2016-05-26 09:48:23 -07:00
2016-05-20 17:58:30 -07:00
2016-05-20 21:20:31 -07:00
2016-05-28 17:37:42 +02:00
2016-05-20 22:20:48 -07:00
2016-05-28 12:04:17 -07:00
2016-05-27 19:14:35 -07:00
2016-05-27 15:26:11 -07:00
2016-05-28 16:41:39 -07:00
2016-05-20 20:57:27 -07:00
2016-05-25 10:40:15 -07:00
2016-05-06 12:51:10 -06:00
2016-05-01 18:33:04 +10:00
2016-05-08 22:44:46 +05:30
2016-05-03 15:52:28 -07:00
2016-05-27 14:28:09 -07:00
2016-06-15 17:57:24 -03:00
2016-05-24 11:00:20 -07:00
2016-05-23 17:04:14 -07:00
2016-05-18 16:38:59 -07:00
2016-05-27 15:26:11 -07:00
2016-05-20 21:20:31 -07:00
2016-05-27 15:26:11 -07:00
2016-05-27 18:49:29 -07:00
2016-05-27 15:26:11 -07:00
2016-05-10 00:01:47 +02:00
2016-05-26 19:34:26 -07:00
2016-05-17 17:14:21 -06:00
2016-05-27 15:26:11 -07:00
2016-06-09 06:55:15 -03:00
2016-04-30 13:56:46 -07:00
2016-05-20 21:20:31 -07:00
2016-05-01 18:32:32 +10:00
2016-05-05 10:13:59 +02:00
2016-05-20 21:12:25 -07:00
2016-05-26 15:35:44 -07:00
2016-05-28 12:32:01 -07:00
2016-05-20 21:26:15 -07:00
2016-05-20 14:06:21 -07:00
2016-05-16 19:17:22 -07:00
2016-05-25 10:40:15 -07:00
2016-05-05 17:38:53 -07:00
2016-05-17 14:45:02 +02:00
2016-05-12 15:50:19 -07:00
2016-05-06 11:08:58 -07:00
2016-05-21 17:07:17 +02:00
2016-05-26 19:34:26 -07:00
2016-05-20 18:33:37 -07:00
2016-05-28 12:04:17 -07:00
2016-05-19 15:20:24 +02:00
2016-05-28 12:23:12 -07:00
2016-04-30 14:15:56 -07:00
2016-06-07 15:46:47 -03:00
2016-05-28 12:04:17 -07:00
2016-05-26 09:23:43 -07:00
2016-05-02 12:09:22 -05:00
2016-05-27 15:26:11 -07:00
2016-05-01 14:11:12 -07:00
2016-05-28 12:04:17 -07:00
2016-05-25 09:47:26 -07:00
2016-05-10 01:19:26 -07:00
2016-05-27 15:26:11 -07:00
2016-05-22 19:44:13 +03:00
2016-05-01 14:00:00 -07:00
2016-05-01 14:37:49 -07:00
2016-05-25 10:19:17 -07:00
2016-05-28 12:04:17 -07:00
2016-05-23 11:18:01 -07:00
2016-05-20 22:02:53 -07:00
a087ce704b