forked from luck/tmp_suning_uos_patched
48e7a3c95c
If hiddev_open() fails, it wrongly frees the shared hiddev structure
kept in hiddev_table instead of the hiddev_list structure allocated
for the opened file descriptor. Existing references to this structure
will then accessed free memory.
This was introduced by
|
||
---|---|---|
.. | ||
hid-core.c | ||
hid-pidff.c | ||
hid-quirks.c | ||
hiddev.c | ||
Kconfig | ||
Makefile | ||
usbhid.h | ||
usbkbd.c | ||
usbmouse.c |