David Woodhouse 1c39858b5d Fix use-after-free oops in Bluetooth HID. ... When cleaning up HIDP sessions, we currently close the ACL connection before deregistering the input device. Closing the ACL connection schedules a workqueue to remove the associated objects from sysfs, but the input device still refers to them -- and if the workqueue happens to run before the input device removal, the kernel will oops when trying to look up PHYSDEVPATH for the removed input device. Fix this by deregistering the input device before closing the connections. Signed-off-by: David Woodhouse <dwmw2@infradead.org> Acked-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2007-07-07 12:22:37 -07:00
..
802	[NET]: cleanup extra semicolons	2007-04-25 22:29:24 -07:00
8021q	[NET]: Fix comparisons of unsigned < 0.	2007-06-03 18:08:47 -07:00
appletalk	header cleaning: don't include smp_lock.h when not used	2007-05-08 11:15:07 -07:00
atm	[NET]: SPIN_LOCK_UNLOCKED cleanup in drivers/atm, net	2007-04-26 01:37:44 -07:00
ax25	[S390] Kconfig: unwanted menus for s390.	2007-05-10 15:46:07 +02:00
bluetooth	Fix use-after-free oops in Bluetooth HID.	2007-07-07 12:22:37 -07:00
bridge	[BRIDGE]: Round off STP perodic timers.	2007-05-31 01:23:39 -07:00
core	[NETPOLL]: Fixups for 'fix soft lockup when removing module'	2007-07-05 17:42:44 -07:00
dccp	[NET]: Fix comparisons of unsigned < 0.	2007-06-03 18:08:47 -07:00
decnet	[NETLINK]: Mark netlink policies const	2007-06-07 13:40:10 -07:00
econet
ethernet
ieee80211	[PATCH] softmac: alloc_ieee80211() NULL check	2007-05-29 11:16:35 -04:00
ipv4	[TCP] tcp_read_sock: Allow recv_actor() return return negative error value.	2007-06-23 23:07:50 -07:00
ipv6	[IPV6] NDISC: Fix thinko to control Router Preference support.	2007-06-22 16:07:04 -07:00
ipx	Fix incorrect prototype for ipxrtr_route_packet()	2007-05-17 05:25:49 -07:00
irda	[IrDA]: f-timer reloading when sending rejected frames.	2007-06-08 19:15:56 -07:00
iucv	Add suspend-related notifications for CPU hotplug	2007-05-09 12:30:56 -07:00
key	xfrm: Add security check before flushing SAD/SPD	2007-06-07 13:42:46 -07:00
lapb
llc	Fix occurrences of "the the "	2007-05-09 08:57:56 +02:00
mac80211	[PATCH] mac80211: Don't stop tx queue on master device while scanning.	2007-06-11 20:29:11 -04:00
netfilter	[NETFILTER]: nf_conntrack_h323: add checking of out-of-range on choices' index values	2007-07-05 17:40:23 -07:00
netlabel	[NetLabel]: consolidate the struct socket/sock handling to just struct sock	2007-06-08 13:33:09 -07:00
netlink	[NETLINK]: Mark netlink policies const	2007-06-07 13:40:10 -07:00
netrom	[NET]: Rework dev_base via list_head (v3)	2007-05-03 15:13:45 -07:00
packet	[AF_PACKET]: Kill CONFIG_PACKET_SOCKET.	2007-05-31 01:23:32 -07:00
rfkill	[RFKILL]: Fix check for correct rfkill allocation	2007-05-19 12:24:39 -07:00
rose	[NET]: Rework dev_base via list_head (v3)	2007-05-03 15:13:45 -07:00
rxrpc	[AF_RXRPC]: Return the number of bytes buffered in rxrpc_send_data()	2007-06-18 23:30:41 -07:00
sched	[NET_SCHED]: Fix filter double free	2007-06-07 13:41:05 -07:00
sctp	SCTP: Add scope_id validation for link-local binds	2007-07-05 17:40:15 -07:00
sunrpc	Merge branch 'master' of /home/trondmy/repositories/git/linux-2.6/	2007-05-17 11:36:59 -04:00
tipc	[TIPC]: Fix infinite loop in netlink handler	2007-06-23 22:59:40 -07:00
unix	[AF_UNIX]: Fix stream recvmsg() race.	2007-06-07 13:40:44 -07:00
wanrouter	[NET]: Fix comparisons of unsigned < 0.	2007-06-03 18:08:47 -07:00
wireless	[PATCH] cfg80211: fix signed macaddress in sysfs	2007-06-11 17:47:41 -04:00
x25	header cleaning: don't include smp_lock.h when not used	2007-05-08 11:15:07 -07:00
xfrm	[XFRM]: Fix MTU calculation for non-ESP SAs	2007-06-18 22:30:15 -07:00
compat.c
Kconfig	[S390] Kconfig: no wireless on s390.	2007-05-10 15:46:08 +02:00
Makefile	[NET]: rfkill: add support for input key to control wireless radio	2007-05-07 00:34:20 -07:00
nonet.c
socket.c	Remove SLAB_CTOR_CONSTRUCTOR	2007-05-17 05:23:04 -07:00
sysctl_net.c
TUNABLE