projects / platform / kernel / linux-amlogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9c31a64) | patch
usb: use-after-free in ffs_epfile_io+0x1c0/0x9b8
authorhe.he <he.he@amlogic.com>
Wed, 26 Sep 2018 06:47:27 +0000 (14:47 +0800)
committerJianxin Pan <jianxin.pan@amlogic.com>
Tue, 9 Oct 2018 05:52:29 +0000 (22:52 -0700)
commit09c5d469c38ccb6773c26d006c8add1b7e07ae40
tree2ba506e41c0d5e6310f39112a19d6688b0ce6e31tree | snapshot
parent9c31a64401155803119dcffa876dfe5afda77125commit | diff
usb: use-after-free in ffs_epfile_io+0x1c0/0x9b8

PD#174155: the io_data pointer have kfree in ffs_epfile_async_io_complete,
it can't use after that such as (if (io_data->aio)),
and this judgment is changed to if (data_flag>0).

Change-Id: I3b620b69bbf4e8040a43bd2435fdb836e11cc512
Signed-off-by: he.he <he.he@amlogic.com>
drivers/usb/gadget/function/f_fs.c diff | blob | history
Domain: System / Kernel;