diff options
author | 2020-01-09 13:17:21 +0000 | |
---|---|---|
committer | 2020-01-15 10:40:16 +0100 | |
commit | 5b24c28cfe136597dc3913e1c00b119307a20c7e (patch) | |
tree | e1448eef314328154bc17074bc692860073fc5fd /tools/perf/scripts/python/export-to-postgresql.py | |
parent | usb: dwc3: gadget: Remove END_TRANSFER delay (diff) | |
download | linux-dev-5b24c28cfe136597dc3913e1c00b119307a20c7e.tar.xz linux-dev-5b24c28cfe136597dc3913e1c00b119307a20c7e.zip |
usb: gadget: f_ncm: Use atomic_t to track in-flight request
Currently ncm->notify_req is used to flag when a request is in-flight.
ncm->notify_req is set to NULL and when a request completes it is
subsequently reset.
This is fundamentally buggy in that the unbind logic of the NCM driver will
unconditionally free ncm->notify_req leading to a NULL pointer dereference.
Fixes: 40d133d7f542 ("usb: gadget: f_ncm: convert to new function interface with backward compatibility")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org>
Signed-off-by: Felipe Balbi <balbi@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions