USB: cdc-wdm: fix race leading leading to memory corruption
authorOliver Neukum <oliver@neukum.org>
Thu, 26 Apr 2012 19:59:10 +0000 (21:59 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 26 Apr 2012 23:59:44 +0000 (16:59 -0700)
commit5c22837adca7c30b66121cf18ad3e160134268d4
treecc1c54f3354ea2768860c615c1b27100eda02145
parent151b61284776be2d6f02d48c23c3625678960b97
USB: cdc-wdm: fix race leading leading to memory corruption

This patch fixes a race whereby a pointer to a buffer
would be overwritten while the buffer was in use leading
to a double free and a memory leak. This causes crashes.
This bug was introduced in 2.6.34

Signed-off-by: Oliver Neukum <oneukum@suse.de>
Tested-by: Bjørn Mork <bjorn@mork.no>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/class/cdc-wdm.c