Thread (1 message) 1 message, 1 author, 2012-03-22

Re: [PATCH 2/2] usbnet: don't clear urb->dev in tx_complete

From: David Miller <hidden>
Date: 2012-03-22 23:33:41

From: Greg Kroah-Hartman <redacted>
Date: Thu, 22 Mar 2012 07:36:07 -0700
On Thu, Mar 22, 2012 at 09:22:38PM +0800, Ming Lei wrote:
quoted
URB unlinking is always racing with its completion and tx_complete
may be called before or during running usb_unlink_urb, so tx_complete
must not clear urb->dev since it will be used in unlink path,
otherwise invalid memory accesses or usb device leak may be caused
inside usb_unlink_urb.

Cc: stable-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org
Cc: Alan Stern <stern-nwvwT67g6+6dFdvTe/nMLpVzexx5G7lz@public.gmane.org>
Cc: Oliver Neukum <redacted>
Signed-off-by: Ming Lei <redacted>
Acked-by: Greg Kroah-Hartman <redacted>
Applied.
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help