Commit 8854894c authored Sep 27, 2013 by Robert Baldyga Committed by Felipe Balbi Oct 01, 2013

usb: gadget: f_fs: fix error handling



This patch add missing error check in ffs_func_bind() function, after
ffs_do_descs() function call for high speed descriptors. Without this
check it's possible that the module will try dereference incorrect
pointer.

[ balbi@ti.com : removed trailing empty line ]

Acked-by: Michal Nazarewicz <mina86@mina86.com>
Signed-off-by: Robert Baldyga <r.baldyga@samsung.com>
Signed-off-by: Felipe Balbi <balbi@ti.com>

parent 4fc4b274

drivers/usb/gadget/f_fs.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -2264,6 +2264,8 @@ static int ffs_func_bind(struct usb_configuration *c,
		data->raw_descs + ret,
		(sizeof data->raw_descs) - ret,
		__ffs_func_bind_do_descs, func);
		if (unlikely(ret < 0))
		goto error;
		}

		/*