[PATCH 0/2] media: gspca: konica: fix two stream lifecycle accesses

[Wang Xiong]

This series fixes two separate lifetime errors in the Konica subdriver.

The first patch avoids reporting a snapshot button release through a
cleared input_dev when an open video file is closed after disconnect.
The second clears last_data_urb before a new stream is allocated, so
the first status completion cannot read an URB freed with the previous
stream.  Both errors are described by archived KASAN reports.

The code was statically checked and the exact patches were applied in
an isolated tree and compiled as konica.o with INPUT=y and INPUT=n.
There was no runtime test.  The archived test source commit and its
effective configuration have not been established; these fixes were
developed and compile-tested on the base recorded below.

Before submission, konica.c at mainline commit
05441d697f7f9a927264f4058cbbc6a03dfcac9d was checked and matched the
base version of this file.  The related mailing-list search did not
identify an existing fix for either access.

OpenAI Codex assisted with static analysis, the two code changes,
validation commands and these messages, in response to a request to
review the archived crashes and prepare minimal lifetime fixes.

Wang Xiong (2):
  media: gspca: konica: skip button release after input disconnect
  media: gspca: konica: clear the cached data URB on stream start

 drivers/media/usb/gspca/konica.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)


base-commit: 6c377d19d4a5116d9bec5203aa3c6c11523e7898
-- 
2.47.3