Thread (4 messages) flat view 4 messages, 2 authors, 2021-08-18

Re: [PATCH v2] usb: gadget: mv_u3d: request_irq() after initializing UDC

From: Felipe Balbi <balbi@kernel.org>
Date: 2021-08-18 14:33:47
Also in: lkml, stable

Nadezda Lutovinova [off-list ref] writes:
If IRQ occurs between calling  request_irq() and  mv_u3d_eps_init(),
then null pointer dereference occurs since u3d->eps[] wasn't
initialized yet but used in mv_u3d_nuke().

The patch puts registration of the interrupt handler after
initializing of neccesery data.

Found by Linux Driver Verification project (linuxtesting.org).

Fixes: 90fccb529d24 ("usb: gadget: Gadget directory cleanup - group UDC drivers")
Signed-off-by: Nadezda Lutovinova <redacted>
Thanks for updating so quickly:

Acked-by: Felipe Balbi <balbi@kernel.org>

-- 
balbi
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help