projects / platform / kernel / linux-3.10.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 16c350d) | patch
usb: gadget: gadgetfs: potential use after free in unbind()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 23 Aug 2013 08:16:15 +0000 (11:16 +0300)
committerMarek Szyprowski <m.szyprowski@samsung.com>
Thu, 15 May 2014 05:26:19 +0000 (07:26 +0200)
commitbbdb38738e85b96d56ba8dd4e7f807d307f5a7f5
tree5051bc1bc2bc48ee1964f6ca567678fd6020b80atree | snapshot
parent16c350dec3a5c83323e77d14ff03f2e8d7fe0942commit | diff
usb: gadget: gadgetfs: potential use after free in unbind()

ffs_data_put() can sometimes free "ffs" so I have moved the call down
a line below the dereference.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Felipe Balbi <balbi@ti.com>
drivers/usb/gadget/f_fs.c diff | blob | history
Domain: System / Kernel;