]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
USB: iowarrior: fix use-after-free after driver unbind
authorJohan Hovold <johan@kernel.org>
Wed, 9 Oct 2019 10:48:43 +0000 (12:48 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 17 Oct 2019 20:42:36 +0000 (13:42 -0700)
commit685546c8dc3c33ba1cdfe9f42b84e6a98a89ed34
treea822fdcd06a01e0bc9e13a0ae9fc64dfe8068a34
parentd8180d423bf8c37e8ab20ba305e6a4e2088d0d1a
USB: iowarrior: fix use-after-free after driver unbind

commit b5f8d46867ca233d773408ffbe691a8062ed718f upstream.

Make sure to stop also the asynchronous write URBs on disconnect() to
avoid use-after-free in the completion handler after driver unbind.

Fixes: 946b960d13c1 ("USB: add driver for iowarrior devices.")
Cc: stable <stable@vger.kernel.org> # 2.6.21: 51a2f077c44e ("USB: introduce usb_anchor")
Signed-off-by: Johan Hovold <johan@kernel.org>
Link: https://lore.kernel.org/r/20191009104846.5925-4-johan@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/misc/iowarrior.c