Alexey Khoroshilov a31267c308 rtl8187: fix use after free on failure path in rtl8187_probe() ...

If allocation of io_dmabuf fails, rtl8187_probe() calls usb_put_dev(udev)
while usb_get_dev(udev) is not called yet. As a result refcnt is decremented
incorrectly and usb_dev can be used after memory deallocation.

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

2014-03-31 13:47:41 -04:00

..

rtl8180

rtl8180: enable rtl8187se support

2014-03-27 14:20:09 -04:00

rtl8187

rtl8187: fix use after free on failure path in rtl8187_probe()

2014-03-31 13:47:41 -04:00

Kconfig

rtl818x: Update Kconfig for rtl8187se

2014-03-27 14:20:10 -04:00

Makefile

rtl818x: move rtl8180 and rtl8187 to separate subdirectories

2010-12-22 13:45:32 -05:00

rtl818x.h

rtl8180: don't use weird trick to access "far" registers

2014-03-31 13:47:41 -04:00