nfc: port100: handle command failure cleanly
authorOliver Neukum <oneukum@suse.com>
Thu, 21 Nov 2019 10:37:10 +0000 (11:37 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 28 Nov 2019 17:29:03 +0000 (18:29 +0100)
commit81f48ce6d83cdae18e04fcaaf623b38f478d8e77
treefe33d94d1dcc570f408f4e84ea537955b1df8f9f
parentdeb7719f059980f4fc2e44c9866e4f02f48200ba
nfc: port100: handle command failure cleanly

commit 5f9f0b11f0816b35867f2cf71e54d95f53f03902 upstream.

If starting the transfer of a command suceeds but the transfer for the reply
fails, it is not enough to initiate killing the transfer for the
command may still be running. You need to wait for the killing to finish
before you can reuse URB and buffer.

Reported-and-tested-by: syzbot+711468aa5c3a1eabf863@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/nfc/port100.c