Bug#631287: BUG during access to hiddev (APC UPS)

[Jonathan Nieder <jrnieder@gmail.com>]

Ben Hutchings wrote:
> On Wed, 2011-06-22 at 19:24 +0400, Dmitry Eremin-Solenikov wrote:

>> After upgrading to squeeze I've started receiving the following BUG in dmesg
>> when apcupsd tries to access hid device for my UPS (APC SmartUPS 3000,
>> connected via USB).
> [...]
>
> There have been some changes to this driver in later versions that are
> supposed to fix this.  However it still looks like there are some broken
> cases, so I'll try to deal with them as well rather than fixing only
> part of the problem.

v2.6.38-rc1~442^2~20 (HID: Fix race between disconnect and hiddev_ioctl,
2010-12-06) seems to follow a sane approach.

Follow-up fixes:

. v2.6.38-rc1~442^2~19 (HID: Consolidate device existence checks in
  hiddev_ioctl, 2010-12-06)
. v3.0-rc1~345^2^3 (HID: hiddev: fix race between hiddev_disconnect and
  hiddev_release, 2011-05-20)
. v3.0-rc4~20^2~6 (HID: hiddev: fix potential use-after-free,
  2011-05-24)
. v3.0-rc4~20^2~4 (HID: hiddev: fix use after free in hiddev_release,
  2011-05-26)

Dmitry, I assume you can still reproduce this.  Could you try a 3.x.y
kernel from sid?  The only packages needed from outside squeeze aside
from linux-image-3.1.0-1-686-pae itself are linux-base and
initramfs-tools.

Hope that helps,
Jonathan