eb988e46da
The put_device() calls rmi_release_function() which frees "fn" so the
dereference on the next line "fn->num_of_irqs" is a use after free.
Move the put_device() to the end to fix this.
Fixes:
|
||
|---|---|---|
| .. | ||
| gameport | ||
| joystick | ||
| keyboard | ||
| misc | ||
| mouse | ||
| rmi4 | ||
| serio | ||
| tablet | ||
| tests | ||
| touchscreen | ||
| Kconfig | ||
| Makefile | ||
| apm-power.c | ||
| evbug.c | ||
| evdev.c | ||
| ff-core.c | ||
| ff-memless.c | ||
| input-compat.c | ||
| input-compat.h | ||
| input-core-private.h | ||
| input-leds.c | ||
| input-mt.c | ||
| input-poller.c | ||
| input-poller.h | ||
| input.c | ||
| joydev.c | ||
| matrix-keymap.c | ||
| mousedev.c | ||
| sparse-keymap.c | ||
| touchscreen.c | ||
| vivaldi-fmap.c | ||