Zou Wei 7867ddc5f3 mISDN: fix possible use-after-free in HFC_cleanup() ... [ Upstream commit 009fc857c5 ] This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself. Reported-by: Hulk Robot <hulkci@huawei.com> Signed-off-by: Zou Wei <zou_wei@huawei.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-07-20 16:17:42 +02:00
..
capi	isdn: capi: fix mismatched prototypes	2021-05-22 10:57:42 +02:00
divert
gigaset	staging: gigaset: add endpoint-type sanity check	2019-12-17 20:39:06 +01:00
hardware	mISDN: fix possible use-after-free in HFC_cleanup()	2021-07-20 16:17:42 +02:00
hisax	isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw()	2019-02-12 19:46:09 +01:00
hysdn
i4l	isdn: i4l: isdn_tty: Fix some concurrency double-free bugs	2019-02-27 10:08:04 +01:00
isdnloop
mISDN	misdn: dsp: select CONFIG_BITREVERSE	2021-01-23 15:48:42 +01:00
Kconfig
Makefile