media: dvb: usb: fix use after free in dvb_usb_device_exit
authorOliver Neukum <oneukum@suse.com>
Tue, 30 Apr 2019 13:07:36 +0000 (09:07 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 31 Jul 2019 05:28:20 +0000 (07:28 +0200)
commit2b97c1946849c6820d90295459712c69447ededf
tree77751b149661adab32047953e32230c3cefdac18
parent3f32d46cc2b5ed29be71f746e85d3f05705fae66
media: dvb: usb: fix use after free in dvb_usb_device_exit

[ Upstream commit 6cf97230cd5f36b7665099083272595c55d72be7 ]

dvb_usb_device_exit() frees and uses the device name in that order.
Fix by storing the name in a buffer before freeing it.

Signed-off-by: Oliver Neukum <oneukum@suse.com>
Reported-by: syzbot+26ec41e9f788b3eba396@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/media/usb/dvb-usb/dvb-usb-init.c