Re: [PATCH] input : avoid too late kobject_uevent(KOBJ_REMOVE) call

2019-02-19 Thread Dmitry Torokhov
Hi Tetsuo, On Mon, Feb 18, 2019 at 07:09:23PM +0900, Tetsuo Handa wrote: > syzbot is hitting use-after-free bug in uinput module [1]. This is because > kobject_uevent(KOBJ_REMOVE) is called again due to commit 0f4dafc0563c6c49 > ("Kobject: auto-cleanup on final unref") after memory allocation faul

[PATCH] input : avoid too late kobject_uevent(KOBJ_REMOVE) call

2019-02-18 Thread Tetsuo Handa
syzbot is hitting use-after-free bug in uinput module [1]. This is because kobject_uevent(KOBJ_REMOVE) is called again due to commit 0f4dafc0563c6c49 ("Kobject: auto-cleanup on final unref") after memory allocation fault injection made kobject_uevent(KOBJ_REMOVE) from device_del() from input_unregi