diff options
| author | Mathias Nyman <[email protected]> | 2017-07-20 11:48:26 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2017-07-20 12:40:35 +0000 |
| commit | 4b895868bb2da60a386a17cde3bf9ecbc70c79f4 (patch) | |
| tree | b2cda155a97ff5e0e0cbc20889775cb03249e3f8 /drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | |
| parent | Merge tag 'fixes-for-v4.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/... (diff) | |
| download | kernel-4b895868bb2da60a386a17cde3bf9ecbc70c79f4.tar.gz kernel-4b895868bb2da60a386a17cde3bf9ecbc70c79f4.zip | |
xhci: Fix NULL pointer dereference when cleaning up streams for removed host
This off by one in stream_id indexing caused NULL pointer dereference and
soft lockup on machines with USB attached SCSI devices connected to a
hotpluggable xhci controller.
The code that cleans up pending URBs for dead hosts tried to dereference
a stream ring at the invalid stream_id 0.
ep->stream_info->stream_rings[0] doesn't point to a ring.
Start looping stream_id from 1 like in all the other places in the driver,
and check that the ring exists before trying to kill URBs on it.
Reported-by: rocko r <[email protected]>
Cc: <[email protected]>
Signed-off-by: Mathias Nyman <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c')
0 files changed, 0 insertions, 0 deletions