From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Subject: usb: dwc3: of-simple: fix use-after-free on remove From: Johan Hovold Message-Id: <20180621101114.GW32411@localhost> Date: Thu, 21 Jun 2018 12:11:14 +0200 To: Roger Quadros Cc: "Rafael J. Wysocki" , Johan Hovold , "Rafael J. Wysocki" , Tony Lindgren , Felipe Balbi , Tero Kristo , Greg Kroah-Hartman , Alan Stern , "open list:ULTRA-WIDEBAND \(UWB\) SUBSYSTEM:" , "Nori, Sekhar" , Grygorii Strashko , Nishanth Menon , Linux PM List-ID: T24gVGh1LCBKdW4gMjEsIDIwMTggYXQgMTE6MTc6MzZBTSArMDMwMCwgUm9nZXIgUXVhZHJvcyB3 cm90ZToKPiBPbiAyMS8wNi8xOCAwMTo1NSwgUmFmYWVsIEouIFd5c29ja2kgd3JvdGU6Cj4gPiBP biBUaHUsIEp1biAyMSwgMjAxOCBhdCAxMjozMiBBTSwgUmFmYWVsIEouIFd5c29ja2kgPHJhZmFl bEBrZXJuZWwub3JnPiB3cm90ZToKPiA+PiBPbiBXZWQsIEp1biAyMCwgMjAxOCBhdCA1OjQ2IFBN LCBKb2hhbiBIb3ZvbGQgPGpvaGFuQGtlcm5lbC5vcmc+IHdyb3RlOgo+ID4+PiBPbiBXZWQsIEp1 biAyMCwgMjAxOCBhdCAwMjo1NDoxMFBNICswMjAwLCBSYWZhZWwgSi4gV3lzb2NraSB3cm90ZToK PiA+Pj4+IE9uIFdlZG5lc2RheSwgSnVuZSAyMCwgMjAxOCAyOjIzOjQ2IFBNIENFU1QgSm9oYW4g SG92b2xkIHdyb3RlOgo+ID4+Pj4+IE9uIFdlZCwgSnVuIDIwLCAyMDE4IGF0IDAyOjE2OjU5QU0g LTA3MDAsIFRvbnkgTGluZGdyZW4gd3JvdGU6Cj4gPj4+Pj4+IEhpLAo+ID4+Pj4+Pgo+ID4+Pj4+ PiBBZGRpbmcgUmFmYWVsIGFuZCBsaW51eC1wbSB0byBDYyBhcyB3ZWxsLgo+ID4+Pj4+Pgo+ID4+ Pj4+PiAqIEZlbGlwZSBCYWxiaSA8YmFsYmlAa2VybmVsLm9yZz4gWzE4MDYxOSAwMToyM106Cj4g Pj4+Pj4+PiBUaGlzIGlzIGEgZGlyZWN0IGNvbnNlcXVlbmNlIG9mIG5vdCBwYXlpbmcgYXR0ZW50 aW9uIHRvIHRoZSBvcmRlciBvZgo+ID4+Pj4+Pj4gdGhpbmdzLiBJZiBkcml2ZXIgd2VyZSB0byBh c3N1bWUgdGhhdCBwbV9kb21haW4tPmFjdGl2YXRlKCkgd291bGQgZG8gdGhlCj4gPj4+Pj4+PiBy aWdodCB0aGluZyBmb3IgdGhlIGRldmljZSAtLSBtZWFuaW5nIHRoYXQgcHJvYmUgd291bGQgcnVu IHdpdGggYW4KPiA+Pj4+Pj4+IGFjdGl2ZSBkZXZpY2UgLS0sIHRoZW4gd2Ugd291bGRuJ3QgbmVl ZCB0aGF0IHBtX3J1bnRpbWVfZ2V0KCkgY2FsbCBvbgo+ID4+Pj4+Pj4gcHJvYmUgYXQgYWxsLiBS YXRoZXIgd2Ugd291bGQgZm9sbG93IHRoZSBzZXF1ZW5jZToKPiA+Pj4+Pj4+Cj4gPj4+Pj4+PiAg ICAgICAgIHBtX3J1bnRpbWVfZm9yYmlkKCkKPiA+Pj4+Pj4+ICAgICAgICAgcG1fcnVudGltZV9z ZXRfYWN0aXZlKCkKPiA+Pj4+Pj4+ICAgICAgICAgcG1fcnVudGltZV9lbmFibGUoKQo+ID4+Pj4+ Pj4KPiA+Pj4+Pj4+ICAgICAgICAgLyogZG8geW91ciBwcm9iZSByb3V0aW5lICovCj4gPj4+Pj4+ Pgo+ID4+Pj4+Pj4gICAgICAgICBwbV9ydW50aW1lX3B1dF9ub2lkbGUoKQo+ID4+Pj4+Pj4KPiA+ Pj4+Pj4+IFRoZW4geW91IHJlbW92ZSB5b3Ugd291bGQgbmVlZCB0byBjYWxsIHBtX3J1bnRpbWVf Z2V0X25vcmVzdW1lKCkgdG8KPiA+Pj4+Pj4+IGJhbGFuY2Ugb3V0IHRoZSBwbV9ydW50aW1lX3B1 dF9ub2lkbGUoKSB0aGVyZS4KPiA+Pj4+Pgo+ID4+Pj4+Pj4gKElmIHlvdSBuZWVkIHRvIGtub3cg d2h5IHRoZSBwbV9ydW50aW1lX3B1dF9ub2lkbGUoKSwgcmVtZW1iZXIgdGhhdAo+ID4+Pj4+Pj4g cG1fcnVudGltZV9zZXRfYWN0aXZlKCkgaW5jcmVtZW50cyB0aGUgdXNhZ2UgY291bnRlciwgc28K PiA+Pj4+Pj4+IHBtX3J1bnRpbWVfcHV0X25vaWRsZSBpcyBiYXNpY2FsbHkgYWxsb3dpbmcgcG1f cnVudGltZSB0byBoYXBwZW4gYXMgc29vbgo+ID4+Pj4+Pj4gYXMgdXNlcnNwYWNlIHdyaXRlcyAi YXV0byIgdG8gL3N5cy8uLi4uL3Bvd2VyL2NvbnRyb2wpCj4gPj4+Pj4KPiA+Pj4+PiBUaGF0J3Mg bm90IGNvcnJlY3Q7IHBtX3J1bnRpbWVfc2V0X2FjdGl2ZSgpIG9ubHkgaW5jcmVtZW50cyB0aGUg dXNhZ2UKPiA+Pj4+PiBjb3VudGVyIG9mIGEgcGFyZW50ICh1bmRlciBzb21lIGNpcmN1bXN0YW5j ZXMpLCBzbyB1bmxlc3MgeW91IGhhdmUgYnVzCj4gPj4+Pj4gY29kZSBpbmNyZW1lbnRpbmcgdGhl IHVzYWdlIGNvdW50ZXIgYmVmb3JlIHByb2JlLCB0aGUgYWJvdmUKPiA+Pj4+PiBwbV9ydW50aW1l X3B1dF9ub2lkbGUoKSB3b3VsZCBhY3R1YWxseSBpbnRyb2R1Y2UgYW4gaW1iYWxhbmNlLgo+ID4+ Pj4KPiA+Pj4+IE5vLCBpdCB3b3VsZG4ndC4gIEl0IGJhbGFuY2VzIHRoZSBpbmNyZW1lbnRhdGlv biBpbiBwbV9ydW50aW1lX2ZvcmJpZCgpLgo+ID4+Pgo+ID4+PiBSaWdodCwgYnV0IGV2ZW4gaWYg eW91IHRha2UgdGhlIHdob2xlIHNlcXVlbmNlLCB3aGljaCBpbmNsdWRlZAo+ID4+PiBwbV9ydW50 aW1lX2ZvcmJpZCgpLCBjb25zaWRlciB3aGF0IGhhcHBlbnMgd2hlbiBwbV9ydW50aW1lX2FsbG93 KCkgaXMKPiA+Pj4gbGF0ZXIgY2FsbGVkIHRocm91Z2ggc3lzZnMgKHNlZSBiZWxvdykuCj4gPj4+ Cj4gPj4+Pj4gQW5kIG5vdGUgdGhhdCB0aGF0J3MgYWxzbyB0aGUgY2FzZSBldmVuIGlmIHlvdSBt ZWFudCB0byBzYXkgdGhhdAo+ID4+Pj4+ICpwbV9ydW50aW1lX2ZvcmJpZCgpKiBpbmNyZW1lbnRz IHRoZSB1c2FnZSBjb3VudGVyICh3aGljaCBpdCBkb2VzKS4KPiA+Pj4+Cj4gPj4+PiBXaHkgaXMg aXQ/Cj4gPj4+Pgo+ID4+Pj4gU3VyZWx5LCBhZnRlcgo+ID4+Pj4KPiA+Pj4+IHBtX3J1bnRpbWVf Zm9yYmlkKGRldik7Cj4gPj4+PiBwbV9ydW50aW1lX3B1dF9ub2lkbGUoZGV2KTsKPiA+Pj4+Cj4g Pj4+PiB0aGUgcnVudGltZSBQTSB1c2FnZSBjb3VudGVyIG9mIGRldiB3aWxsIGJlIHRoZSBzYW1l IGFzIGJlZm9yZSwgd29uJ3QgaXQ/Cj4gPj4+Cj4gPj4+IFN1cmUsIGJ1dCB0aGUgaW1iYWxhbmNl LCBvciByYXRoZXIgaW5jb25zaXN0ZW50IHN0YXRlLCBoYXMgYWxyZWFkeSBiZWVuCj4gPj4+IGlu dHJvZHVjZWQuCj4gPj4+Cj4gPj4+IENvbnNpZGVyIHRoZSBmb2xsb3dpbmcgc2VxdWVuY2Ugb2Yg ZXZlbnRzOgo+ID4+Pgo+ID4+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgdXNhZ2UgY291bnQKPiA+Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDAKPiA+Pj4gcHJvYmUoKQo+ID4+PiAgICAgICAgIHBtX3J1bnRpbWVfZm9yYmlkKCkgICAg ICAgICAgICAgMQo+IAo+IENhbiB5b3UgY2FsbCBwbV9ydW50aW1lX2ZvcmJpZCgpIGJlZm9yZSBw bV9ydW50aW1lX2VuYWJsZSgpPwo+IFdvdWxkbid0IGl0IGZhaWwgd2l0aCAtRUFDQ0VTIGFzIGRl di0+cG93ZXIuZGlzYWJsZV9kZXB0aCA+IDA/CgpObywgcG1fcnVudGltZV9mb3JiaWQoKSBtYW5p cHVsYXRlcyB0aGUgdXNhZ2UgY291bnQgZGlyZWN0bHkgYW5kIGRvZXNuJ3QKY2hlY2sgZm9yIGVy cm9ycyBmcm9tIHJwbV9yZXN1bWUoKSwgc28gdGhpcyBhY3R1YWxseSAid29ya3MiLgoKVGhhdCBk b2Vzbid0IG1lYW4gYW55b25lIHNob3VsZCBiZSBkb2luZyBpdCwgdGhvdWdoIChlLmcuIGZvciB0 aGUgYmVsb3cKcmVhc29ucykuCgo+ID4+PiAgICAgICAgIHBtX3J1bnRpbWVfc2V0X2FjdGl2ZSgp Cj4gPj4+ICAgICAgICAgcG1fcnVudGltZV9lbmFibGUoKQo+ID4+PiAgICAgICAgIHBtX3J1bnRp bWVfcHV0X25vaWRsZSgpICAgICAgICAgMAo+ID4+Pgo+ID4+PiBIZXJlIG5vdGhpbmcgaXMgcHJl dmVudGluZyB0aGUgZGV2aWNlIGZyb20gcnVudGltZSBzdXNwZW5kaW5nLCBkZXNwaXRlCj4gPj4+ IHJ1bnRpbWUgUE0gYmVpbmcgZm9yYmlkZGVuLiBJbiBmYWN0LCBpdCB3aWxsIHR5cGljYWxseSBi ZSBzdXNwZW5kZWQgZHVlCj4gPj4+IHRvIHRoZSBwbV9yZXF1ZXN0X2lkbGUoKSBpbiBkcml2ZXJf cHJvYmVfZGV2aWNlKCkuIElmIGxhdGVyIHdlIGhhdmU6Cj4gPj4+Cj4gPj4+IGVjaG8gYXV0byA+ IHBvd2VyL2NvbnRyb2wKPiA+Pj4gICAgICAgICBwbV9ydW50aW1lX2FsbG93KCkgICAgICAgICAg ICAgIC0xCj4gPj4KPiA+PiBPSywgeW91IGhhdmUgYSBwb2ludC4KPiA+Pgo+ID4+IEFmdGVyIGNh bGxpbmcgcG1fcnVudGltZV9mb3JiaWQoKSB0aGUgZHJpdmVyIHNob3VsZCBhbGxvdyB1c2VyIHNw YWNlCj4gPj4gdG8gdW5ibG9jayBydW50aW1lIFBNIGZvciB0aGUgZGV2aWNlIC0gb3IgY2FsbCBw bV9ydW50aW1lX2FsbG93KCkKPiA+PiBpdHNlbGYuCj4gPiAKPiA+IFRoZSBjb25mdXNpb24gcmVn YXJkaW5nIHRoZSBwbV9ydW50aW1lX3B1dF9ub2lkbGUoKSBhdCB0aGUgZW5kIG1heQo+ID4gY29t ZSBmcm9tIHRoZSBzcGVjaWFsIHJlcXVpcmVtZW50IG9mIHRoZSBQQ0kgYnVzIHR5cGUgYXMgcGVy IHRoZQo+ID4gY29tbWVudCBpbiBsb2NhbF9wY2lfcHJvYmUoKS4KPiAKPiBPSy4gU28gaXQgaXMg dGhlIFBDSSBidXMgd2hpY2ggaXMgYmVoYXZpbmcgb2RkIGhlcmUgYW5kCj4gcG1fcnVudGltZV9w dXRfbm9pZGxlKCkgbmVlZHMgdG8gYmUgZG9uZSBvbmx5IGlmIGl0cyBhIFBDSSBkZXZpY2UsIGNv cnJlY3Q/CgpZZWFoLCB0aGUgcG1fcnVudGltZV9wdXRfbm9pZGxlKCkgd291bGQgYmUgdXNlZCB0 byBiYWxhbmNlIHRoZQp1bmNvbmRpdGlvbmFsIHJ1bnRpbWUgcmVzdW1lIGJ5IHRoZSBidXMgY29k ZSBpbiBjYXNlIGEgUENJIGRyaXZlcgppbXBsZW1lbnRzIHJ1bnRpbWUgcG0uCgpKb2hhbgotLS0K VG8gdW5zdWJzY3JpYmUgZnJvbSB0aGlzIGxpc3Q6IHNlbmQgdGhlIGxpbmUgInVuc3Vic2NyaWJl IGxpbnV4LXVzYiIgaW4KdGhlIGJvZHkgb2YgYSBtZXNzYWdlIHRvIG1ham9yZG9tb0B2Z2VyLmtl cm5lbC5vcmcKTW9yZSBtYWpvcmRvbW8gaW5mbyBhdCAgaHR0cDovL3ZnZXIua2VybmVsLm9yZy9t YWpvcmRvbW8taW5mby5odG1sCg==