HID: Free timer after removing device
Timer conn.process_repage_timer is being freed in HID_HostDeregister which causes use after free condition in HID_HostRemoveDev-> HID_HostCloseDev. Fix: Call alarm_free after HID_HostRemoveDev in HID_HostDeregister Test: Code analysis Bug: 116774368 Change-Id: Iddecd126716a5660f4c37ddc917bacee84342297
Loading
Please register or sign in to comment