Commit fa3a5a18 authored by Oliver Neukum's avatar Oliver Neukum Committed by Dmitry Torokhov

Input: ff-memless - kill timer in destroy()

No timer must be left running when the device goes away.
Signed-off-by: default avatarOliver Neukum <oneukum@suse.com>
Reported-and-tested-by: syzbot+b6c55daa701fc389e286@syzkaller.appspotmail.com
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/1573726121.17351.3.camel@suse.comSigned-off-by: default avatarDmitry Torokhov <dmitry.torokhov@gmail.com>
parent 79aae6ac
...@@ -489,6 +489,15 @@ static void ml_ff_destroy(struct ff_device *ff) ...@@ -489,6 +489,15 @@ static void ml_ff_destroy(struct ff_device *ff)
{ {
struct ml_device *ml = ff->private; struct ml_device *ml = ff->private;
/*
* Even though we stop all playing effects when tearing down
* an input device (via input_device_flush() that calls into
* input_ff_flush() that stops and erases all effects), we
* do not actually stop the timer, and therefore we should
* do it here.
*/
del_timer_sync(&ml->timer);
kfree(ml->private); kfree(ml->private);
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment