usb: gadget: gadgetfs: potential use after free in unbind()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 23 Aug 2013 08:16:15 +0000 (11:16 +0300)
committerChanho Park <chanho61.park@samsung.com>
Tue, 18 Nov 2014 02:46:17 +0000 (11:46 +0900)
commita71a59301e110ef30f81a42e6c80d1958419d631
tree65b9e3aa1319d7e9ddaff39e17697f190abce393
parente9fd73623e840b1aa4dc96fbaddd9837d86c67fd
usb: gadget: gadgetfs: potential use after free in unbind()

ffs_data_put() can sometimes free "ffs" so I have moved the call down
a line below the dereference.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Felipe Balbi <balbi@ti.com>
drivers/usb/gadget/f_fs.c