From: Greg Kroah-Hartman <redacted>
Date: Thu, 22 Mar 2012 07:36:07 -0700
On Thu, Mar 22, 2012 at 09:22:38PM +0800, Ming Lei wrote:
quoted
URB unlinking is always racing with its completion and tx_complete
may be called before or during running usb_unlink_urb, so tx_complete
must not clear urb->dev since it will be used in unlink path,
otherwise invalid memory accesses or usb device leak may be caused
inside usb_unlink_urb.
Cc: stable-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org
Cc: Alan Stern <stern-nwvwT67g6+6dFdvTe/nMLpVzexx5G7lz@public.gmane.org>
Cc: Oliver Neukum <redacted>
Signed-off-by: Ming Lei <redacted>
Acked-by: Greg Kroah-Hartman <redacted>
Applied.
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html