]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
usb: gadget: clear related members when goto fail
authorHangyu Hua <hbh25y@gmail.com>
Fri, 31 Dec 2021 17:21:38 +0000 (01:21 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 8 Mar 2022 18:04:07 +0000 (19:04 +0100)
commit6b432b7b5a77e8bfd041da0ba00c98fa31097c4e
tree9413fa17dd1d29507e31cc917edb12124cf79d54
parent70196d12856306a17ddc3eae0f022b9c1d748e52
usb: gadget: clear related members when goto fail

commit 501e38a5531efbd77d5c73c0ba838a889bfc1d74 upstream.

dev->config and dev->hs_config and dev->dev need to be cleaned if
dev_config fails to avoid UAF.

Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Hangyu Hua <hbh25y@gmail.com>
Link: https://lore.kernel.org/r/20211231172138.7993-3-hbh25y@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/gadget/legacy/inode.c