Re: [PATCH v5 00/15] Fix leaks in rc core

[Hans Verkuil <hverkuil+cisco@kernel.org>]

Hi Sean,

For this series:

Reviewed-by: Hans Verkuil <hverkuil+cisco@kernel.org>

Regards,

	Hans

On 29/07/2026 17:22, Sean Young wrote:
> Changes since v4:
>  - media: redrat3: Error path leaves device in transmitting state 
>    - this now removes the check for transmitting boolean in transmit as it
>      is now redundant.
>    - Reworded commit message
>  - media: rc: Use after free in ir_raw_event_handle()
>  - media: rc: Fix race condition during rc_register_device()
>    - Reworded commit message
>  - commits affecting particular modules are sorted together
> 
> Changes since v3:
>  - sashiko had many more good review comments
> 
> Changes since v2:
>  - sashiko had many more good review comments
> 
> Changes since v1:
>  - sashiko had many good review comments
>  - Added fix rc: Use after free in ir_raw_event_handle()
>  - Added fix meson-ir-tx: Ensure probe error is propagated
>  - Added fix redrat3: Ensure all urbs are suspended
>  - Added fix media: redrat3: Error path leaves device in transmitting state
>  - streamzap fix was incorrect
>  - Other minor fixes
> 
> 
> Sean Young (15):
>   media: streamzap: Add missing rc_unregister_device()
>   media: redrat3: Ensure rc device is freed if enable_detector() fails
>   media: redrat3: Ensure we don't read beyond the end of the packet
>   media: redrat3: Ensure all urbs are suspended
>   media: redrat3: Error path leaves device in transmitting state
>   media: sunxi-cir: Ensure no more interrupts can occur before free
>   media: meson-ir-tx: Ensure clock is disabled on unbind
>   media: meson-ir-tx: Ensure rc_free_device() is called on unbind
>   media: meson-ir-tx: Ensure probe error is propagated
>   media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled
>   media: cx88: Specify rc type at rc_allocate_type()
>   media: saa7134: Specify rc type at rc_allocate_type()
>   media: rc: Fix race condition during rc_register_device()
>   media: rc: Use after free in ir_raw_event_handle()
>   media: rc: Fix use after free in bpf progs
> 
>  drivers/media/pci/cx88/cx88-input.c       | 22 ++++++-----
>  drivers/media/pci/saa7134/saa7134-input.c |  7 ++--
>  drivers/media/rc/bpf-lirc.c               | 18 ++++++---
>  drivers/media/rc/ir-hix5hd2.c             |  5 ++-
>  drivers/media/rc/meson-ir-tx.c            | 14 +++----
>  drivers/media/rc/rc-ir-raw.c              | 47 +++++++++--------------
>  drivers/media/rc/rc-main.c                | 19 +++++----
>  drivers/media/rc/redrat3.c                | 40 +++++++++++++------
>  drivers/media/rc/streamzap.c              |  1 +
>  drivers/media/rc/sunxi-cir.c              |  2 +-
>  10 files changed, 97 insertions(+), 78 deletions(-)
>