usb: gadget: fix potential double-free in m66592_probe.
authorQiushi Wu <wu000273@umn.edu>
Sat, 23 May 2020 04:06:25 +0000 (23:06 -0500)
committerSasha Levin <sashal@kernel.org>
Tue, 30 Jun 2020 19:38:27 +0000 (15:38 -0400)
commit03eeb914f9ef479a8ceff1f25d14bd4075bdc3a9
tree9e5b4cf6376bb9a502587dd68d3cab26d1303bba
parente03c43a1e88a788c19350a26e178db583fa60817
usb: gadget: fix potential double-free in m66592_probe.

[ Upstream commit 44734a594196bf1d474212f38fe3a0d37a73278b ]

m66592_free_request() is called under label "err_add_udc"
and "clean_up", and m66592->ep0_req is not set to NULL after
first free, leading to a double-free. Fix this issue by
setting m66592->ep0_req to NULL after the first free.

Fixes: 0f91349b89f3 ("usb: gadget: convert all users to the new udc infrastructure")
Signed-off-by: Qiushi Wu <wu000273@umn.edu>
Signed-off-by: Felipe Balbi <balbi@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/usb/gadget/udc/m66592-udc.c