]> git.karo-electronics.de Git - karo-tx-linux.git/commit
USB: chipidea: fix use after free bug
authorLothar Waßmann <LW@KARO-electronics.de>
Thu, 22 Nov 2012 09:11:25 +0000 (10:11 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 11 Jan 2013 17:18:33 +0000 (09:18 -0800)
commit8af66623ab9c6d0c8b1517d578f7f3ad1e323cc9
tree0890d67302de799d0ac8dddea7d54534f46d9785
parent7564b3b7f18d55c017346ae061f5359872e0a281
USB: chipidea: fix use after free bug

commit 98c35534420d3147553bd3071a5fc63cd56de5b1 upstream.

The pointer to a platform_device struct must not be dereferenced after
the device has been unregistered.

This bug produces a crash when unloading the ci13xxx kernel module
compiled with CONFIG_PAGE_POISONING enabled.

Signed-off-by: Lothar Waßmann <LW@KARO-electronics.de>
Acked-by: Alexander Shishkin <alexander.shishkin@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/chipidea/core.c