tree 762afdad91e58f0cdea7a5f840f37edc99f426df
parent 4a8e70f5d0d80675fc17b9ba1e62db8ca6b91775
author Krzysztof Kozlowski <k.kozlowski@samsung.com> 1438042590 +0900
committer Jiri Kosina <jkosina@suse.com> 1438175075 +0200

HID: core/input: Fix accessing freed memory during driver unbind

During unbinding the driver was dereferencing a pointer to memory
already freed by power_supply_unregister().

Driver was freeing its internal description of battery through pointers
stored in power_supply structure. However, because the core owns the
power supply instance, after calling power_supply_unregister() the
driver cannot access these members.

Fix this by using resource-managed allocations so internal data will be
freed by pointers stored in resource-managed core.

Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com>
Reported-by: H.J. Lu <hjl.tools@gmail.com>
Fixes: 297d716f6260 ("power_supply: Change ownership from driver to core")
Cc: <stable@vger.kernel.org>
Signed-off-by: Jiri Kosina <jkosina@suse.com>