Skip to content
Commit e93cd351 authored by Johan Hovold's avatar Johan Hovold Committed by Kalle Valo
Browse files

rsi: fix use-after-free on failed probe and unbind



Make sure to stop both URBs before returning after failed probe as well
as on disconnect to avoid use-after-free in the completion handler.

Reported-by: default avatar <syzbot+b563b7f8dbe8223a51e8@syzkaller.appspotmail.com>
Fixes: a4302bff ("rsi: add bluetooth rx endpoint")
Fixes: dad0d04f ("rsi: Add RS9113 wireless driver")
Cc: stable <stable@vger.kernel.org>     # 3.15
Cc: Siva Rebbagondla <siva.rebbagondla@redpinesignals.com>
Cc: Prameela Rani Garnepudi <prameela.j04cs@gmail.com>
Cc: Amitkumar Karwar <amit.karwar@redpinesignals.com>
Cc: Fariya Fatima <fariyaf@gmail.com>
Signed-off-by: default avatarJohan Hovold <johan@kernel.org>
Signed-off-by: default avatarKalle Valo <kvalo@codeaurora.org>
parent 2d52378a
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment