]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
appledisplay: fix error handling in the scheduled work
authorOliver Neukum <oneukum@suse.com>
Wed, 6 Nov 2019 12:49:01 +0000 (13:49 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 29 Nov 2019 09:08:25 +0000 (10:08 +0100)
commit484bd6ec326b80332fa75d44f9eee9ddc0a71b80
tree6e33cd73ba99047aeca4d63f501ed28ab3444d80
parentf3571534ea6968eac9e54c5e11f1cc3d46f4608c
appledisplay: fix error handling in the scheduled work

commit 91feb01596e5efc0cc922cc73f5583114dccf4d2 upstream.

The work item can operate on

1. stale memory left over from the last transfer
the actual length of the data transfered needs to be checked
2. memory already freed
the error handling in appledisplay_probe() needs
to cancel the work in that case

Reported-and-tested-by: syzbot+495dab1f175edc9c2f13@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20191106124902.7765-1-oneukum@suse.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/misc/appledisplay.c