Messages in this thread | | | Date | Wed, 13 Apr 2022 11:39:50 +0200 | Subject | Re: [PATCH] NFC: NULL out the dev->rfkill to prevent UAF | From | Krzysztof Kozlowski <> |
| |
On 12/04/2022 07:32, Lin Ma wrote: > Commit 3e3b5dfcd16a ("NFC: reorder the logic in nfc_{un,}register_device") > assumes the device_is_registered() in function nfc_dev_up() will help > to check when the rfkill is unregistered. However, this check only > take effect when device_del(&dev->dev) is done in nfc_unregister_device(). > Hence, the rfkill object is still possible be dereferenced. >
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
Best regards, Krzysztof
| |