usb: gadget: clear related members when goto fail
authorHangyu Hua <hbh25y@gmail.com>
Fri, 31 Dec 2021 17:21:38 +0000 (01:21 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 8 Mar 2022 18:12:31 +0000 (19:12 +0100)
commitab3656acb7b4f33a30970a920ed90f0db36d940b
tree854d2709da2bf268e8f48ad4343f1f79c22de797
parent07de9a494b5ae41b9253411a8e9576d7fceedcc3
usb: gadget: clear related members when goto fail

commit 501e38a5531efbd77d5c73c0ba838a889bfc1d74 upstream.

dev->config and dev->hs_config and dev->dev need to be cleaned if
dev_config fails to avoid UAF.

Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Hangyu Hua <hbh25y@gmail.com>
Link: https://lore.kernel.org/r/20211231172138.7993-3-hbh25y@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/gadget/legacy/inode.c