Johan Hovold 58c85123d9 greybus: es1/2: fix use-after-free in completion callback ...

Reset the hcpriv field before returning the message to greybus core in
the OUT-URB completion callback.

This fixes a use-after-free bug when sending responses to incoming
requests as the final reference is then dropped when the message is
returned.

Reported-by: Michael Scott <michael.scott@linaro.org>
Signed-off-by: Johan Hovold <johan@hovoldconsulting.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

2015-09-29 19:09:06 +02:00

drivers/staging/greybus

greybus: es1/2: fix use-after-free in completion callback

2015-09-29 19:09:06 +02:00

Description

No description provided

3.5 GiB

Languages

C 97%

Assembly 1%

Shell 0.6%

Rust 0.5%

Python 0.4%

Other 0.3%