]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 65778c3) | patch
usb: gadget: gadgetfs: use after free in dev_release()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 23 Aug 2013 08:14:49 +0000 (11:14 +0300)
committerFelipe Balbi <balbi@ti.com>
Tue, 27 Aug 2013 20:03:28 +0000 (15:03 -0500)
commit520eb92ab115655d47e614a843c73907ec22ba39
tree8d5b125b22ea01d125ab716f89583c7a769679a1tree | snapshot
parent65778c333b86089b9f68cd2dea9ff3e98d924e19commit | diff
usb: gadget: gadgetfs: use after free in dev_release()

The call to put_dev() releases "dev".  Hopefully, we don't need to set
the state to STATE_DEV_DISABLED anyway so I have removed those lines.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Felipe Balbi <balbi@ti.com>
drivers/usb/gadget/inode.c diff | blob | history
Linux Kernel Source Tree.