cuse: fix destruction

Move chardev destruction from cuse_channel_release() to cuse_fc_release().
The former is called when closing a /dev/cuse fd, which may happen more
than once (for cloned connections) resulting in use after free.

Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
3 files changed