[media] rc-core: race condition during ir_raw_event_register()
authorSean Young <sean@mess.org>
Wed, 24 May 2017 09:24:51 +0000 (06:24 -0300)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Sun, 4 Jun 2017 18:25:38 +0000 (15:25 -0300)
commit963761a0b2e85663ee4a5630f72930885a06598a
tree013955d01bc1907b0513037c35baa57f0b6d3ee8
parent20249f84238e006ef7b726d3211a70de7454d045
[media] rc-core: race condition during ir_raw_event_register()

A rc device can call ir_raw_event_handle() after rc_allocate_device(),
but before rc_register_device() has completed. This is racey because
rcdev->raw is set before rcdev->raw->thread has a valid value.

Cc: stable@kernel.org
Reported-by: kbuild test robot <fengguang.wu@intel.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/rc/rc-ir-raw.c