usb: dwc3: Reset num_trbs after skipping
authorThinh Nguyen <thinh.nguyen@synopsys.com>
Wed, 13 Feb 2019 03:39:27 +0000 (19:39 -0800)
committerFelipe Balbi <felipe.balbi@linux.intel.com>
Wed, 13 Feb 2019 11:02:39 +0000 (13:02 +0200)
commitc7152763f02e05567da27462b2277a554e507c89
tree54dca2a67053a52c399550685fd8f795124be1c5
parentc5353b225df9b2d0cf881873eef6f680e43c9aa2
usb: dwc3: Reset num_trbs after skipping

Currently req->num_trbs is not reset after the TRBs are skipped and
processed from the cancelled list. The gadget driver may reuse the
request with an invalid req->num_trbs, and DWC3 will incorrectly skip
trbs. To fix this, simply reset req->num_trbs to 0 after skipping
through all of them.

Fixes: c3acd5901414 ("usb: dwc3: gadget: use num_trbs when skipping TRBs on ->dequeue()")
Signed-off-by: Thinh Nguyen <thinhn@synopsys.com>
Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>
drivers/usb/dwc3/gadget.c