USB: gadget: f_qc_rndis: Add check before queuing notification available
There is a chance that rndis_response_available() and unbind() race each
other due to which request's buffer might have freed and could cause
accessing freed buffer pointer. Hence add check before accessing buffer
pointer of USB request for interrupt endpoint.
CRs-Fixed: 973943
Change-Id: I34af9cd7bbce89507c6b424aad2786f758ddc1e6
Signed-off-by:
Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
Loading
Please register or sign in to comment