Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 39d09dfc authored by qctecmdr's avatar qctecmdr Committed by Gerrit - the friendly Code Review server
Browse files

Merge "usb: f_fs: Fix use-after-free for epfile"

parents a5af1843 971a8577

drivers/usb/gadget/function/f_fs.c

+3 −0
Original line number Diff line number Diff line
@@ -1424,10 +1424,13 @@ ffs_epfile_release(struct inode *inode, struct file *file) 
{

	struct ffs_epfile *epfile = inode->i_private;

	struct ffs_data *ffs = epfile->ffs;

	unsigned long flags;



	ENTER();



	spin_lock_irqsave(&epfile->ffs->eps_lock, flags);

	__ffs_epfile_read_buffer_free(epfile);

	spin_unlock_irqrestore(&epfile->ffs->eps_lock, flags);

	ffs_log("%s: state %d setup_state %d flag %lu opened %u",

		epfile->name, epfile->ffs->state, epfile->ffs->setup_state,

		epfile->ffs->flags, atomic_read(&epfile->opened));