OSDN Git Service

USB: cdc-wdm: fix race leading leading to memory corruption
authorOliver Neukum <oliver@neukum.org>
Thu, 26 Apr 2012 19:59:10 +0000 (21:59 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 7 May 2012 15:56:36 +0000 (08:56 -0700)
commit197d1155b07b582d9969f456f61ee07d632af7e1
tree54e9966a3010df457cfbbd0f44bfdc83d4b84e22
parentca288ca1de5957cb50e170dcdb5375c0e6467405
USB: cdc-wdm: fix race leading leading to memory corruption

commit 5c22837adca7c30b66121cf18ad3e160134268d4 upstream.

This patch fixes a race whereby a pointer to a buffer
would be overwritten while the buffer was in use leading
to a double free and a memory leak. This causes crashes.
This bug was introduced in 2.6.34

Signed-off-by: Oliver Neukum <oneukum@suse.de>
Tested-by: Bjørn Mork <bjorn@mork.no>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/class/cdc-wdm.c