Hello:
This patch was applied to netdev/net.git (master)
by David S. Miller [off-list ref]:
On Fri, 6 Jan 2023 17:23:44 +0900 you wrote:
Fix a use-after-free that occurs in hcd when in_urb sent from
pn533_usb_send_frame() is completed earlier than out_urb. Its callback
frees the skb data in pn533_send_async_complete() that is used as a
transfer buffer of out_urb. Wait before sending in_urb until the
callback of out_urb is called. To modify the callback of out_urb alone,
separate the complete function of out_urb and ack_urb.
[...]
Here is the summary with links:
- [net,v2] nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
https://git.kernel.org/netdev/net/c/9dab880d675b
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html