Commit e74bd4d3 authored Dec 21, 2017 by Manu Gautam Committed by Felipe Balbi Feb 12, 2018

usb: gadget: core: Fix use-after-free of usb_request



Driver is tracing usb_request after freeing it.
Fix it by changing the order.

Signed-off-by: Manu Gautam <mgautam@codeaurora.org>
Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>

parent c49f6305

drivers/usb/gadget/udc/core.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -180,8 +180,8 @@ EXPORT_SYMBOL_GPL(usb_ep_alloc_request);
		void usb_ep_free_request(struct usb_ep *ep,
		struct usb_request *req)
		{
		ep->ops->free_request(ep, req);
		trace_usb_ep_free_request(ep, req, 0);
		ep->ops->free_request(ep, req);
		}
		EXPORT_SYMBOL_GPL(usb_ep_free_request);