Bryan O'Donoghue 2068fbb20b usb: gadget: f_ecm: Use atomic_t to track in-flight request ... commit d710562e01 upstream. Currently ecm->notify_req is used to flag when a request is in-flight. ecm->notify_req is set to NULL and when a request completes it is subsequently reset. This is fundamentally buggy in that the unbind logic of the ECM driver will unconditionally free ecm->notify_req leading to a NULL pointer dereference. Fixes: da741b8c56 ("usb ethernet gadget: split CDC Ethernet function") Cc: stable <stable@vger.kernel.org> Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Signed-off-by: Felipe Balbi <balbi@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-02-11 04:35:10 -08:00
..
function	usb: gadget: f_ecm: Use atomic_t to track in-flight request	2020-02-11 04:35:10 -08:00
legacy	usb: gadget: legacy: set max_speed to super-speed	2020-02-11 04:35:10 -08:00
udc	USB: dummy-hcd: use usb_urb_dir_in instead of usb_pipein	2020-01-12 12:21:10 +01:00
Kconfig	…
Makefile	…
composite.c	…
config.c	…
configfs.c	…
configfs.h	…
epautoconf.c	…
functions.c	…
u_f.c	…
u_f.h	…
u_os_desc.h	…
usbstring.c	…