diff options
| author | Johan Hovold <[email protected]> | 2019-10-09 10:48:42 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2019-10-10 10:45:06 +0000 |
| commit | 80cd5479b525093a56ef768553045741af61b250 (patch) | |
| tree | 3d39716bed63861406644319ee527f04fe12ef3c /lib/kunit/example-test.c | |
| parent | USB: iowarrior: fix use-after-free on disconnect (diff) | |
| download | kernel-80cd5479b525093a56ef768553045741af61b250.tar.gz kernel-80cd5479b525093a56ef768553045741af61b250.zip | |
USB: iowarrior: fix use-after-free on release
The driver was accessing its struct usb_interface from its release()
callback without holding a reference. This would lead to a
use-after-free whenever debugging was enabled and the device was
disconnected while its character device was open.
Fixes: 549e83500b80 ("USB: iowarrior: Convert local dbg macro to dev_dbg")
Cc: stable <[email protected]> # 3.16
Signed-off-by: Johan Hovold <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'lib/kunit/example-test.c')
0 files changed, 0 insertions, 0 deletions