diff options
author | Alan Stern <stern@rowland.harvard.edu> | 2015-01-30 18:58:26 +0100 |
---|---|---|
committer | Greg Kroah-Hartman <greg@kroah.com> | 2015-01-31 18:05:06 +0100 |
commit | c99197902da284b4b723451c1471c45b18537cde (patch) | |
tree | ff9d749b80d391ccc7b2dcd769c475facdeb9897 /arch/arm/mach-omap2/omap4-common.c | |
parent | ehci-pci: disable for Intel MID platforms (diff) | |
download | linux-c99197902da284b4b723451c1471c45b18537cde.tar.xz linux-c99197902da284b4b723451c1471c45b18537cde.zip |
USB: fix use-after-free bug in usb_hcd_unlink_urb()
The usb_hcd_unlink_urb() routine in hcd.c contains two possible
use-after-free errors. The dev_dbg() statement at the end of the
routine dereferences urb and urb->dev even though both structures may
have been deallocated.
This patch fixes the problem by storing urb->dev in a local variable
(avoiding the dereference of urb) and moving the dev_dbg() up before
the usb_put_dev() call.
Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Reported-by: Joe Lawrence <joe.lawrence@stratus.com>
Tested-by: Joe Lawrence <joe.lawrence@stratus.com>
CC: <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <greg@kroah.com>
Diffstat (limited to 'arch/arm/mach-omap2/omap4-common.c')
0 files changed, 0 insertions, 0 deletions