]> git.baikalelectronics.ru Git - kernel.git/commit
brcmfmac: kill URB when request timed out
authorMathy Vanhoef <vanhoefm@gmail.com>
Thu, 13 Nov 2014 02:33:34 +0000 (21:33 -0500)
committerJohn W. Linville <linville@tuxdriver.com>
Mon, 17 Nov 2014 20:04:04 +0000 (15:04 -0500)
commit512a54f971d1f09f3bb38b9e602c772c7f83b686
treee58236b802800f7013139d29ee17d534fc6180c4
parentf2aa38655d464a145f398f98966368a72fe33574
brcmfmac: kill URB when request timed out

Kill the submitted URB in brcmf_usb_dl_cmd if the request timed out. This
assures the URB is never submitted twice. It also prevents a possible
use-after-free of the URB transfer buffer if a timeout occurs.

Signed-off-by: Mathy Vanhoef <vanhoefm@gmail.com>
Acked-by: Arend van Spriel <arend@broadcom.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/brcm80211/brcmfmac/usb.c