HID: hiddev: do cleanup in failure of opening a device
commit 6d4472d7bec39917b54e4e80245784ea5d60ce49 upstream. Undo what we did for opening before releasing the memory slice. Reported-by: syzbot <syzbot+62a1e04fd3ec2abf099e@syzkaller.appspotmail.com> Cc: Andrey Konovalov <andreyknvl@google.com> Signed-off-by: Hillf Danton <hdanton@sina.com> Signed-off-by: Jiri Kosina <jkosina@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
committed by
Greg Kroah-Hartman
parent
0aab1a4653
commit
b545dc9deb
@@ -321,6 +321,10 @@ static int hiddev_open(struct inode *inode, struct file *file)
|
|||||||
hid_hw_power(hid, PM_HINT_NORMAL);
|
hid_hw_power(hid, PM_HINT_NORMAL);
|
||||||
bail_unlock:
|
bail_unlock:
|
||||||
mutex_unlock(&hiddev->existancelock);
|
mutex_unlock(&hiddev->existancelock);
|
||||||
|
|
||||||
|
spin_lock_irq(&list->hiddev->list_lock);
|
||||||
|
list_del(&list->node);
|
||||||
|
spin_unlock_irq(&list->hiddev->list_lock);
|
||||||
bail:
|
bail:
|
||||||
file->private_data = NULL;
|
file->private_data = NULL;
|
||||||
vfree(list);
|
vfree(list);
|
||||||
|
|||||||
Reference in New Issue
Block a user