[LinuxPPS] 7 Jul 19:22 - Fix use-after-free oops in Bluetooth HID.

[linuxpps: David Woodhouse <>]

Fix use-after-free oops in Bluetooth HID.  
  
When cleaning up HIDP sessions, we currently close the ACL connection  
before deregistering the input device. Closing the ACL connection  
schedules a workqueue to remove the associated objects from sysfs, but  
the input device still refers to them -- and if the workqueue happens to  
run before the input device removal, the kernel will oops when trying to  
look up PHYSDEVPATH for the removed input device.  
  
Fix this by deregistering the input device before closing the  
connections.  
  
Signed-off-by: David Woodhouse   
Acked-by: Marcel Holtmann   
Signed-off-by: Linus Torvalds   
  
net/bluetooth/hidp/core.c

URL: http://gitweb.enneenne.com/?p=linuxpps;a=commit;h=1c39858b5dd46004b12c5acd26d8df346bef8a10