Oliver Neukum eff73de2b1 media: cpia2_usb: first wake up, then free in disconnect ... Kasan reported a use after free in cpia2_usb_disconnect() It first freed everything and then woke up those waiting. The reverse order is correct. Fixes: 6c493f8b28 ("[media] cpia2: major overhaul to get it in a working state again") Signed-off-by: Oliver Neukum <oneukum@suse.com> Reported-by: syzbot+0c90fc937c84f97d0aa6@syzkaller.appspotmail.com Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>		2019-05-28 12:26:11 -04:00
..
cec	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
common	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
dvb-core	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
dvb-frontends	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
firewire	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
i2c	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
mc	media: move drivers/media/media-* to drivers/media/mc/mc-*	2019-05-28 12:15:46 -04:00
mmc	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
pci	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
platform	media: vicodec: correctly support unbinding of the driver	2019-05-28 12:25:08 -04:00
radio	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
rc	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
spi	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
tuners	Linux 5.2-rc2	2019-05-28 11:21:51 -04:00
usb	media: cpia2_usb: first wake up, then free in disconnect	2019-05-28 12:26:11 -04:00
v4l2-core	media: v4l2: Initialize mpeg slice controls	2019-05-28 12:23:44 -04:00
Kconfig	media: move drivers/media/media-* to drivers/media/mc/mc-*	2019-05-28 12:15:46 -04:00
Makefile	media: move drivers/media/media-* to drivers/media/mc/mc-*	2019-05-28 12:15:46 -04:00