iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
91feb01596
linux/drivers/usb/misc
History
Oliver Neukum 91feb01596 appledisplay: fix error handling in the scheduled work 
The work item can operate on

1. stale memory left over from the last transfer
the actual length of the data transfered needs to be checked
2. memory already freed
the error handling in appledisplay_probe() needs
to cancel the work in that case

Reported-and-tested-by: syzbot+495dab1f175edc9c2f13@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20191106124902.7765-1-oneukum@suse.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-11-07 11:19:23 +01:00
..
sisusbvga usb: Fix Kconfig indentation 2019-10-04 14:09:41 +02:00
adutux.c USB: adutux: fix use-after-free on release 2019-10-10 12:43:19 +02:00
appledisplay.c appledisplay: fix error handling in the scheduled work 2019-11-07 11:19:23 +01:00
chaoskey.c USB: chaoskey: fix use-after-free on release 2019-10-10 12:43:19 +02:00
cypress_cy7c63.c USB: cypress_cy7c63: convert to use dev_groups 2019-08-09 07:55:44 +02:00
cytherm.c USB: cytherm: convert to use dev_groups 2019-08-09 07:55:44 +02:00
ehset.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
emi26.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
emi62.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
ezusb.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
ftdi-elan.c usb: ftdi-elan: move a couple of statements to next line 2019-10-04 14:09:42 +02:00
idmouse.c USB: idmouse: clean up runaway white space 2019-11-07 11:16:49 +01:00
iowarrior.c USB: iowarrior: use pr_err() 2019-10-10 12:45:07 +02:00
isight_firmware.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
Kconfig Merge 5.4-rc3 into usb-next 2019-10-14 07:09:59 +02:00
ldusb.c USB: ldusb: fix control-message timeout 2019-10-28 17:46:24 +01:00
legousbtower.c USB: legousbtower: drop superfluous newlines 2019-11-07 11:17:55 +01:00
lvstest.c USB: lvstest: convert to use dev_groups 2019-08-09 07:55:44 +02:00
Makefile USB: rio500: Remove Rio 500 kernel driver 2019-10-04 10:53:36 +02:00
trancevibrator.c USB: trancevibrator: convert to use dev_groups 2019-08-09 07:55:45 +02:00
usb251xb.c usb: usb251xb: Add support for USB2422 2019-11-04 15:51:05 +01:00
usb3503.c usb: misc: usb3503: get optional clock by devm_clk_get_optional() 2019-04-19 14:24:25 +02:00
usb4604.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
usb_u132.h USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
usblcd.c USB: usblcd: use pr_err() 2019-10-04 11:11:08 +02:00
usbsevseg.c USB: usbsevseg: convert to use dev_groups 2019-08-09 07:55:45 +02:00
usbtest.c usb: misc: usbtest: add super-speed isoc support 2019-02-13 13:03:23 +02:00
uss720.c usb: misc: uss720: Fix two sleep-in-atomic-context bugs 2018-09-05 14:36:53 +02:00
yurex.c USB: yurex: fix NULL-derefs on disconnect 2019-10-10 14:24:06 +02:00