[PATCH v3 0/7] HID: sensor: custom: use-after-free after remove

[Srinivas Pandruvada]

This is v3 version with changes suggested by shashiko-bot and Jonathan.
Also rebased on top of 7.4-rc2 kernel release.

This patch series is essentially the same version that was sent to
Semyon for testing.

Following a feedback review conducted with various AI models, it was
suggested to break each change into individual, separate patches. This
makes perfect sense, which is why this series now contains more patches.

Additionally, these reviews identified issues in the adjacent probe and
removal code when active sensor instances are present. I have addressed
those issues in this version as well.

v3:
- Address comment on patch 6/7 by Shashiko on useless goto
and suggestion to remove sensor_hub_remove_callback() for
err_remove_dev_if.
- On patch 4/7 : HID: sensor: custom: Fix state lifetime during removal
Rename goto as suggested by Jonathan

For using guard(), need a follow up patch as that will be a cleanup.


Srinivas Pandruvada (7):
  HID: sensor-hub: Synchronize callback removal with raw events
  HID: sensor: custom: Set owner for misc device
  HID: sensor: custom: Disable sensor before hub close on removal
  HID: sensor: custom: Fix state lifetime during removal
  HID: sensor: custom: Serialize misc device reads
  HID: sensor: custom: Register enable attribute after misc device
  HID: sensor-hub: Remove clients before stopping hardware

 drivers/hid/hid-sensor-custom.c | 118 +++++++++++++++++++++++---------
 drivers/hid/hid-sensor-hub.c    |  27 ++++++--
 2 files changed, 108 insertions(+), 37 deletions(-)

-- 
2.56.0