projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f4c5d59) | patch
mwifiex: usb: kill urb before free its memory
authorXinming Hu <huxm@marvell.com>
Tue, 23 May 2017 07:12:31 +0000 (07:12 +0000)
committerKalle Valo <kvalo@codeaurora.org>
Wed, 31 May 2017 13:54:08 +0000 (16:54 +0300)
commit42d1abb50ffc51c65e9cec735c8a9711296a05f7
tree1ab564d6493d36619e988c542a04f3c5b742e992tree | snapshot (tar.gz zip)
parentf4c5d5991590c4f640d5de245047444bf11f69d2commit | diff
mwifiex: usb: kill urb before free its memory

we have observed host system hang when device firmware crash,
stack trace show it was an use-after-free case: previous submitted
urb will be holding in usbcore, and given back to device driver
when device disconnected, while the urb have been freed in usb
device disconnect handler. This patch kill the holding urb before
free its memory.

Signed-off-by: Xinming Hu <huxm@marvell.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/marvell/mwifiex/usb.c diff | blob | blame | history