]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commitdiff
HID: sony: Fix memory corruption issue on cleanup.
authorRoderick Colenbrander <roderick.colenbrander@sony.com>
Wed, 4 Sep 2019 21:22:11 +0000 (14:22 -0700)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Wed, 16 Oct 2019 09:55:13 +0000 (11:55 +0200)
BugLink: https://bugs.launchpad.net/bugs/1847155
commit 2bcdacb70327013ca2066bfcf2af1009eff01f1d upstream.

The sony driver is not properly cleaning up from potential failures in
sony_input_configured. Currently it calls hid_hw_stop, while hid_connect
is still running. This is not a good idea, instead hid_hw_stop should
be moved to sony_probe. Similar changes were recently made to Logitech
drivers, which were also doing improper cleanup.

Signed-off-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
CC: stable@vger.kernel.org
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
drivers/hid/hid-sony.c

index 15173cd29eb89178193ee01e305bc94899855e04..4e64993d49c55d1abc98cbaab966d768e0a1c4fd 100644 (file)
@@ -2716,7 +2716,6 @@ err_stop:
        kfree(sc->output_report_dmabuf);
        sony_remove_dev_list(sc);
        sony_release_device_id(sc);
-       hid_hw_stop(hdev);
        return ret;
 }
 
@@ -2778,6 +2777,7 @@ static int sony_probe(struct hid_device *hdev, const struct hid_device_id *id)
         */
        if (!(hdev->claimed & HID_CLAIMED_INPUT)) {
                hid_err(hdev, "failed to claim input\n");
+               hid_hw_stop(hdev);
                return -ENODEV;
        }