Dafna Hirschfeld 6990570f7e media: v4l2-core: fix a use-after-free bug of sd->devnode ... sd->devnode is released after calling v4l2_subdev_release. Therefore it should be set to NULL so that the subdev won't hold a pointer to a released object. This fixes a reference after free bug in function v4l2_device_unregister_subdev Fixes: 0e43734d4c ("media: v4l2-subdev: add release() internal op") Cc: stable@vger.kernel.org Signed-off-by: Dafna Hirschfeld <dafna.hirschfeld@collabora.com> Reviewed-by: Ezequiel Garcia <ezequiel@collabora.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>		2020-03-05 22:44:06 +01:00
..
Kconfig	media: v4l2-core: move i2c helpers out of v4l2-common.c	2019-08-26 10:50:48 -03:00
Makefile	media: v4l2-core: move i2c helpers out of v4l2-common.c	2019-08-26 10:50:48 -03:00
tuner-core.c	treewide: Add SPDX license identifier for more missed files	2019-05-21 10:50:45 +02:00
v4l2-async.c	media: v4l2-async: Safely clean up an uninitialised notifier	2019-07-25 11:00:06 -04:00
v4l2-clk.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
v4l2-common.c	media: v4l2-common: add RGB565 and RGB55 to v4l2_format_info	2019-10-10 13:53:41 -03:00
v4l2-compat-ioctl32.c	media: v4l2-core: fix compat v4l2_buffer handling for time64 ABI	2020-01-03 15:53:46 +01:00
v4l2-ctrls.c	media: v4l2-ctrl: Lock main_hdl on operations of requests_queued.	2019-11-10 07:29:10 +01:00
v4l2-dev.c	media: rename VFL_TYPE_GRABBER to _VIDEO	2020-02-24 16:52:39 +01:00
v4l2-device.c	media: v4l2-core: fix a use-after-free bug of sd->devnode	2020-03-05 22:44:06 +01:00
v4l2-dv-timings.c	media: v4l2-dv-timings: Use DIV_ROUND_CLOSEST directly to make it readable	2019-11-05 08:49:22 -03:00
v4l2-event.c	media: v4l2-core: fix VIDIOC_DQEVENT for time64 ABI	2020-01-03 15:47:57 +01:00
v4l2-fh.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174	2019-05-30 11:26:41 -07:00
v4l2-flash-led-class.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
v4l2-fwnode.c	media: v4l2-fwnode: Print the node name while parsing endpoints	2020-01-23 15:49:45 +01:00
v4l2-i2c.c	media: v4l2-core: v4l2-i2c: convert to new API with ERRPTR	2020-02-24 15:21:52 +01:00
v4l2-ioctl.c	media: rename VFL_TYPE_GRABBER to _VIDEO	2020-02-24 16:52:39 +01:00
v4l2-mc.c	media: Split v4l2_pipeline_pm_use into v4l2_pipeline_pm_{get, put}	2020-03-02 15:11:40 +01:00
v4l2-mem2mem.c	media: v4l2-mem2mem.c: fix broken links	2020-02-24 15:09:10 +01:00
v4l2-spi.c	v4l2-core: fix coding style for the two new c files	2019-08-26 11:01:25 -03:00
v4l2-subdev.c	media: v4l2-core: fix uninitialized structure fields being returned to userspace	2020-01-09 15:26:18 +01:00
v4l2-trace.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
videobuf-core.c	media: v4l2: abstract timeval handling in v4l2_buffer	2020-01-03 15:43:35 +01:00
videobuf-dma-contig.c	media/v4l2-core: untag user pointers in videobuf_dma_contig_user_get	2019-09-25 17:51:41 -07:00
videobuf-dma-sg.c	mm, tree-wide: rename put_user_page*() to unpin_user_page*()	2020-01-31 10:30:38 -08:00
videobuf-vmalloc.c	media updates for v5.3-rc1	2019-07-09 09:47:22 -07:00