rtl818x: fix potential use after free
authorPan Bian <bianpan2016@163.com>
Thu, 29 Nov 2018 10:48:10 +0000 (18:48 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 5 Dec 2019 14:37:18 +0000 (15:37 +0100)
commit5d6babdd9c5eaa61aaf6bcd0763af3fe8f0aa4b9
tree4f9ad12a5b66c45ac112476d02aa09c92f5b1e26
parent8cdb45a907c49369b1deb4748fb27c5f25fca4c8
rtl818x: fix potential use after free

[ Upstream commit afbb1947db94eacc5a13302eee88a9772fb78935 ]

entry is released via usb_put_urb just after calling usb_submit_urb.
However, entry is used if the submission fails, resulting in a use after
free bug. The patch fixes this.

Signed-off-by: Pan Bian <bianpan2016@163.com>
ACKed-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c