Alexey Khoroshilov 4958cf32f6
usb: dbgp gadget: fix use after free in dbgp_unbind() ...
After dbgp_bind()-dbgp_unbind() cycle happens, static variable dbgp
contains pointers to already deallocated memory (dbgp.serial and dbgp.req).
If the next dbgp_bind() fails, for example in usb_ep_alloc_request(),
dbgp_bind() calls dbgp_unbind() on failure path,
and dbgp_unbind() frees dbgp.serial that still stores a pointer
to already deallocated memory.
The patch sets pointers to NULL in dbgp_unbind().
Found by Linux Driver Verification project (linuxtesting.org).
Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru >
Signed-off-by: Felipe Balbi <balbi@ti.com >
2014-08-19 09:21:46 -05:00
2014-08-14 18:13:46 -06:00
2014-08-06 21:14:42 -07:00
2014-08-13 18:27:40 -06:00
2014-08-06 21:14:42 -07:00
2014-07-31 13:45:32 -04:00
2014-08-14 18:10:33 -06:00
2014-07-31 01:07:28 +02:00
2014-08-08 11:34:32 -07:00
2014-08-15 10:26:01 +05:30
2014-08-08 11:14:29 -07:00
2014-08-08 11:14:29 -07:00
2014-07-23 10:18:07 -07:00
2014-08-14 18:13:46 -06:00
2014-08-14 18:13:46 -06:00
2014-08-14 18:10:33 -06:00
2014-07-23 00:51:30 +02:00
2014-08-11 07:14:01 -07:00
2014-08-15 17:56:45 -06:00
2014-07-23 10:22:35 +09:00
2014-08-06 09:38:14 -07:00
2014-08-08 15:57:33 -07:00
2014-08-08 18:00:35 -07:00
2014-08-15 17:57:49 -06:00
2014-08-15 18:16:28 -06:00
2014-08-06 20:06:14 -07:00
2014-08-04 17:32:24 -07:00
2014-08-14 09:55:13 -06:00
2014-07-29 11:46:28 +03:00
2014-08-09 09:15:07 -07:00
2014-08-05 21:16:46 -07:00
2014-08-15 17:06:40 -04:00
2014-08-04 18:36:12 -07:00
2014-08-14 18:10:33 -06:00
2014-08-15 18:16:28 -06:00
2014-08-08 11:00:26 -07:00
2014-07-18 16:50:55 -07:00
2014-08-08 11:14:29 -07:00
2014-08-02 15:03:58 -07:00
2014-08-08 11:34:32 -07:00
2014-08-06 18:01:19 -07:00
2014-08-07 17:23:16 -07:00
2014-07-29 01:57:25 -07:00
2014-08-14 09:17:56 -06:00
2014-08-08 15:57:28 -07:00
2014-07-29 19:26:30 -05:00
2014-07-25 17:16:58 -04:00
2014-08-14 10:56:15 -06:00
2014-08-08 11:34:32 -07:00
2014-08-14 18:10:33 -06:00
2014-08-13 17:42:11 -06:00
2014-08-14 18:10:33 -06:00
2014-07-23 01:14:41 +02:00
2014-08-14 09:53:39 -06:00
2014-08-08 15:57:25 -07:00
2014-08-14 18:10:33 -06:00
2014-08-07 08:50:34 -07:00
2014-08-08 11:34:32 -07:00
2014-08-08 11:34:32 -07:00
2014-08-16 01:23:56 -07:00
2014-07-30 00:23:09 +02:00
2014-08-08 11:14:29 -07:00
2014-08-12 12:15:14 -06:00
2014-08-08 18:06:29 -07:00
2014-08-12 12:15:14 -06:00
2014-08-07 17:17:39 -07:00
2014-08-08 15:57:47 -07:00
2014-08-07 08:41:00 -07:00
2014-08-05 18:57:18 -07:00
2014-08-15 18:28:58 -06:00
2014-08-08 11:00:26 -07:00
2014-07-18 13:45:24 -04:00
2014-08-08 15:57:47 -07:00
2014-08-06 20:10:32 -07:00
2014-07-22 10:13:00 +08:00
2014-08-14 09:53:39 -06:00
2014-08-19 09:21:46 -05:00
2014-08-01 15:48:08 -07:00
2014-08-08 10:39:16 -06:00
2014-08-12 12:15:14 -06:00
2014-07-27 21:07:15 +09:30
2014-08-08 15:57:30 -07:00
2014-08-07 08:47:00 -07:00
2014-08-12 12:15:14 -06:00
2014-08-04 17:32:24 -07:00
2014-08-04 18:34:04 -07:00
4958cf32f6