]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
USB: iowarrior: fix use-after-free after driver unbind
authorJohan Hovold <johan@kernel.org>
Wed, 9 Oct 2019 10:48:43 +0000 (12:48 +0200)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 12 Nov 2019 18:04:33 +0000 (19:04 +0100)
commit43ec1d43ab63067a6fbeac3720c97fde8d24f70e
tree6cf8415c5ede7d4e336ef9e6442d5abeffddb644
parentf2c16c8068ca4bf1a64070ad1245625f314ddddd
USB: iowarrior: fix use-after-free after driver unbind

BugLink: https://bugs.launchpad.net/bugs/1850541
commit b5f8d46867ca233d773408ffbe691a8062ed718f upstream.

Make sure to stop also the asynchronous write URBs on disconnect() to
avoid use-after-free in the completion handler after driver unbind.

Fixes: 946b960d13c1 ("USB: add driver for iowarrior devices.")
Cc: stable <stable@vger.kernel.org> # 2.6.21: 51a2f077c44e ("USB: introduce usb_anchor")
Signed-off-by: Johan Hovold <johan@kernel.org>
Link: https://lore.kernel.org/r/20191009104846.5925-4-johan@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
drivers/usb/misc/iowarrior.c