Unverified Commit ae2fd6c7 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!8705 usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency 

Merge Pull Request from: @ci-robot 
 
PR sync from: dinglongwei <dinglongwei1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/A4QAETV7Q3FYDK6VTUQTDJU4EHLTHJTQ/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9RFRD 
 
Link:https://gitee.com/openeuler/kernel/pulls/8705

 

Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents 254b0364 b98dfd2c

drivers/usb/dwc2/hcd.c

+1 −1
Original line number Diff line number Diff line
@@ -4844,8 +4844,8 @@ static int _dwc2_hcd_urb_enqueue(struct usb_hcd *hcd, struct urb *urb, 
	if (qh_allocated && qh->channel && qh->channel->qh == qh)

		qh->channel->qh = NULL;

fail2:

	spin_unlock_irqrestore(&hsotg->lock, flags);

	urb->hcpriv = NULL;

	spin_unlock_irqrestore(&hsotg->lock, flags);

	kfree(qtd);

	qtd = NULL;

fail1: