UbiquitousOS
/
OpenCloudOS-Kernel
mirror of https://gitee.com/OpenCloudOS/OpenCloudOS-Kernel.git
11
0
Fork 0
Code Issues Projects Releases Wiki Activity

greybus: es2: fix use-after-free at disconnect 

The interface private data is released as part of host-device removal
and must not be accessed afterwards.

Signed-off-by: Johan Hovold <johan@hovoldconsulting.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
This commit is contained in:
Johan Hovold 2015-11-04 18:55:12 +01:00 committed by Greg Kroah-Hartman
parent 357499df45
commit a51e8551e2
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
drivers/staging/greybus/es2.c
View File

@ -510,6 +510,7 @@ static void ap_disconnect(struct usb_interface *interface)
{
struct es2_ap_dev *es2;
struct usb_device *udev;
int *cport_to_ep;
int bulk_in;
int i;
@ -548,9 +549,10 @@ static void ap_disconnect(struct usb_interface *interface)
usb_set_intfdata(interface, NULL);
udev = es2->usb_dev;
cport_to_ep = es2->cport_to_ep;
gb_hd_remove(es2->hd);
kfree(es2->cport_to_ep);
kfree(cport_to_ep);
usb_put_dev(udev);
}