usbip: fix possibility of dereference by NULLL pointer in vhci_hcd.c
authorNobuo Iwata <nobuo.iwata@fujixerox.co.jp>
Thu, 13 Oct 2016 03:49:02 +0000 (12:49 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 7 Nov 2016 09:19:49 +0000 (10:19 +0100)
commitd79cda045e3bacb7e754a5324cd3d4ce80708eb1
tree6ecd81986ce1dd6925946490b8604503afefa50f
parent220c61b6f73a1d6f28591aeedff51a668068361b
usbip: fix possibility of dereference by NULLL pointer in vhci_hcd.c

This patch fixes possibility of dereference by NULLL pointer in "[PATCH
v5 1/3] usbip: vhci extension: modifications to vhci driver" which has
been merged to 4.9-rc1. It occurs when a URB with pointer to invalid
USB/IP device is enqueued in race condition against detach operation.

A pointer was passed to vdev_to_vhci() before NULL check.
In vdev_to_vhci(), there's a dereference by the pointer.

This patch moves vdev_to_vhci() after NULL check of the pointer.

Signed-off-by: Nobuo Iwata <nobuo.iwata@fujixerox.co.jp>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/usbip/vhci_hcd.c