linux/drivers/media/rc
Hans Verkuil d54fc3bbc2 [media] rc-main: fix kernel oops after unloading keymap module
When the rc_map table is created the char pointer of the name of the keymap
is copied to the rc_map->name field. However, this pointer points to memory
from the keymap module itself.

Since these keymap modules are not refcounted, that means anyone can call
rmmod to unload that module. Which is not a big deal because the contents of
the map is all copied to rc_map, except for the keymap name.

So after a keymap module is unloaded the name pointer has become stale. Unloading
the rc-core module will now cause a kernel oops in rc_dev_uevent().

The solution is to kstrdup the name so there are no more references to the
keymap module remaining.

Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2016-07-08 16:16:53 -03:00
..
img-ir [media] rc: img-ir: fix error in parameters passed to irq_free() 2015-04-08 12:52:50 -03:00
keymaps [media] Fix AverMedia RM-KS remote keymap 2016-03-03 08:33:41 -03:00
ati_remote.c [media] ati_remote: avoid fragile snprintf use 2016-05-07 10:27:16 -03:00
ene_ir.c PNP: media/rc: Use module_pnp_driver to register driver 2015-03-18 22:39:17 +01:00
ene_ir.h [media] ene_ir: don't use pr_debug after all 2013-07-29 11:49:45 -03:00
fintek-cir.c [media] media/fintek: drop pci_ids dependency 2015-05-12 13:44:41 -03:00
fintek-cir.h [media] rc: Fir warnings on m68k arch 2013-11-08 09:45:37 -02:00
gpio-ir-recv.c [media] rc: gpio-ir-recv: add timeout on idle 2015-11-19 07:46:33 -02:00
igorplugusb.c [media] igorplugusb: fix leaks in error path 2016-03-03 11:44:29 -03:00
iguanair.c [media] rc-core: remove protocol arrays 2014-07-25 19:10:43 -03:00
imon.c [media] imon: fix other RC type protocol support 2014-11-03 10:56:51 -02:00
ir-hix5hd2.c [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND 2015-10-22 15:48:24 -02:00
ir-jvc-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-lirc-codec.c [media] ir-lirc-codec.c: don't leak lirc->drv-rbuf 2015-12-21 14:59:36 -02:00
ir-mce_kbd-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-nec-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-rc5-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-rc6-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-rx51.c [media] include/media: move platform_data to linux/platform_data/media 2015-11-17 06:58:42 -02:00
ir-sanyo-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-sharp-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-sony-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ir-xmp-decoder.c [media] media: rc: move check whether a protocol is enabled to the core 2015-11-19 11:39:17 -02:00
ite-cir.c PNP: media/rc: Use module_pnp_driver to register driver 2015-03-18 22:39:17 +01:00
ite-cir.h
Kconfig [media] media: rc: ir-sharp-decoder: add support for Denon variant of the protocol 2015-11-19 09:32:35 -02:00
lirc_dev.c [media] lirc_dev: avoid double mutex unlock 2016-03-01 12:04:48 -03:00
Makefile [media] media: rc: add driver for Amlogic Meson IR remote receiver 2014-11-26 13:29:01 -02:00
mceusb.c [media] mceusb: add support for SMK eHome receiver 2016-05-07 10:30:46 -03:00
meson-ir.c [media] media: rc: add driver for Amlogic Meson IR remote receiver 2014-11-26 13:29:01 -02:00
nuvoton-cir.c [media] media: rc: nuvoton: switch attribute wakeup_data to text 2016-03-05 08:22:03 -03:00
nuvoton-cir.h [media] media: rc: nuvoton: support reading / writing wakeup sequence via sysfs 2016-03-03 08:28:41 -03:00
rc-core-priv.h [media] media: rc: raw: improve FIFO handling 2016-01-25 12:38:09 -02:00
rc-ir-raw.c [media] media: rc: raw: improve FIFO handling 2016-01-25 12:38:09 -02:00
rc-loopback.c Revert "[media] rc: rc-loopback: Add loopback of filter scancodes" 2015-08-19 07:02:53 -03:00
rc-main.c [media] rc-main: fix kernel oops after unloading keymap module 2016-07-08 16:16:53 -03:00
redrat3.c [media] ir: Fix IR_MAX_DURATION enforcement 2015-06-05 11:26:42 -03:00
st_rc.c [media] media: st-rc: remove misuse of IRQF_NO_SUSPEND flag 2015-11-19 06:46:05 -02:00
streamzap.c [media] rc-core: Remove 'struct timeval' usage 2015-11-19 09:31:45 -02:00
sunxi-cir.c [media] rc: sunxi-cir: support module autoloading 2016-03-03 12:42:34 -03:00
ttusbir.c [media] rc-core: remove protocol arrays 2014-07-25 19:10:43 -03:00
winbond-cir.c [media] rc-core: remove protocol arrays 2014-07-25 19:10:43 -03:00