From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Subject: usb: dwc3: of-simple: fix use-after-free on remove From: Roger Quadros Message-Id: <40418b42-cc4d-e8fd-d175-b1b4c11cbd48@ti.com> Date: Thu, 21 Jun 2018 11:17:36 +0300 To: "Rafael J. Wysocki" , Johan Hovold Cc: "Rafael J. Wysocki" , Tony Lindgren , Felipe Balbi , Tero Kristo , Greg Kroah-Hartman , Alan Stern , "open list:ULTRA-WIDEBAND \(UWB\) SUBSYSTEM:" , "Nori, Sekhar" , Grygorii Strashko , Nishanth Menon , Linux PM List-ID: T24gMjEvMDYvMTggMDE6NTUsIFJhZmFlbCBKLiBXeXNvY2tpIHdyb3RlOgo+IE9uIFRodSwgSnVu IDIxLCAyMDE4IGF0IDEyOjMyIEFNLCBSYWZhZWwgSi4gV3lzb2NraSA8cmFmYWVsQGtlcm5lbC5v cmc+IHdyb3RlOgo+PiBPbiBXZWQsIEp1biAyMCwgMjAxOCBhdCA1OjQ2IFBNLCBKb2hhbiBIb3Zv bGQgPGpvaGFuQGtlcm5lbC5vcmc+IHdyb3RlOgo+Pj4gT24gV2VkLCBKdW4gMjAsIDIwMTggYXQg MDI6NTQ6MTBQTSArMDIwMCwgUmFmYWVsIEouIFd5c29ja2kgd3JvdGU6Cj4+Pj4gT24gV2VkbmVz ZGF5LCBKdW5lIDIwLCAyMDE4IDI6MjM6NDYgUE0gQ0VTVCBKb2hhbiBIb3ZvbGQgd3JvdGU6Cj4+ Pj4+IE9uIFdlZCwgSnVuIDIwLCAyMDE4IGF0IDAyOjE2OjU5QU0gLTA3MDAsIFRvbnkgTGluZGdy ZW4gd3JvdGU6Cj4+Pj4+PiBIaSwKPj4+Pj4+Cj4+Pj4+PiBBZGRpbmcgUmFmYWVsIGFuZCBsaW51 eC1wbSB0byBDYyBhcyB3ZWxsLgo+Pj4+Pj4KPj4+Pj4+ICogRmVsaXBlIEJhbGJpIDxiYWxiaUBr ZXJuZWwub3JnPiBbMTgwNjE5IDAxOjIzXToKPj4+Pj4+PiBUaGlzIGlzIGEgZGlyZWN0IGNvbnNl cXVlbmNlIG9mIG5vdCBwYXlpbmcgYXR0ZW50aW9uIHRvIHRoZSBvcmRlciBvZgo+Pj4+Pj4+IHRo aW5ncy4gSWYgZHJpdmVyIHdlcmUgdG8gYXNzdW1lIHRoYXQgcG1fZG9tYWluLT5hY3RpdmF0ZSgp IHdvdWxkIGRvIHRoZQo+Pj4+Pj4+IHJpZ2h0IHRoaW5nIGZvciB0aGUgZGV2aWNlIC0tIG1lYW5p bmcgdGhhdCBwcm9iZSB3b3VsZCBydW4gd2l0aCBhbgo+Pj4+Pj4+IGFjdGl2ZSBkZXZpY2UgLS0s IHRoZW4gd2Ugd291bGRuJ3QgbmVlZCB0aGF0IHBtX3J1bnRpbWVfZ2V0KCkgY2FsbCBvbgo+Pj4+ Pj4+IHByb2JlIGF0IGFsbC4gUmF0aGVyIHdlIHdvdWxkIGZvbGxvdyB0aGUgc2VxdWVuY2U6Cj4+ Pj4+Pj4KPj4+Pj4+PiAgICAgICAgIHBtX3J1bnRpbWVfZm9yYmlkKCkKPj4+Pj4+PiAgICAgICAg IHBtX3J1bnRpbWVfc2V0X2FjdGl2ZSgpCj4+Pj4+Pj4gICAgICAgICBwbV9ydW50aW1lX2VuYWJs ZSgpCj4+Pj4+Pj4KPj4+Pj4+PiAgICAgICAgIC8qIGRvIHlvdXIgcHJvYmUgcm91dGluZSAqLwo+ Pj4+Pj4+Cj4+Pj4+Pj4gICAgICAgICBwbV9ydW50aW1lX3B1dF9ub2lkbGUoKQo+Pj4+Pj4+Cj4+ Pj4+Pj4gVGhlbiB5b3UgcmVtb3ZlIHlvdSB3b3VsZCBuZWVkIHRvIGNhbGwgcG1fcnVudGltZV9n ZXRfbm9yZXN1bWUoKSB0bwo+Pj4+Pj4+IGJhbGFuY2Ugb3V0IHRoZSBwbV9ydW50aW1lX3B1dF9u b2lkbGUoKSB0aGVyZS4KPj4+Pj4KPj4+Pj4+PiAoSWYgeW91IG5lZWQgdG8ga25vdyB3aHkgdGhl IHBtX3J1bnRpbWVfcHV0X25vaWRsZSgpLCByZW1lbWJlciB0aGF0Cj4+Pj4+Pj4gcG1fcnVudGlt ZV9zZXRfYWN0aXZlKCkgaW5jcmVtZW50cyB0aGUgdXNhZ2UgY291bnRlciwgc28KPj4+Pj4+PiBw bV9ydW50aW1lX3B1dF9ub2lkbGUgaXMgYmFzaWNhbGx5IGFsbG93aW5nIHBtX3J1bnRpbWUgdG8g aGFwcGVuIGFzIHNvb24KPj4+Pj4+PiBhcyB1c2Vyc3BhY2Ugd3JpdGVzICJhdXRvIiB0byAvc3lz Ly4uLi4vcG93ZXIvY29udHJvbCkKPj4+Pj4KPj4+Pj4gVGhhdCdzIG5vdCBjb3JyZWN0OyBwbV9y dW50aW1lX3NldF9hY3RpdmUoKSBvbmx5IGluY3JlbWVudHMgdGhlIHVzYWdlCj4+Pj4+IGNvdW50 ZXIgb2YgYSBwYXJlbnQgKHVuZGVyIHNvbWUgY2lyY3Vtc3RhbmNlcyksIHNvIHVubGVzcyB5b3Ug aGF2ZSBidXMKPj4+Pj4gY29kZSBpbmNyZW1lbnRpbmcgdGhlIHVzYWdlIGNvdW50ZXIgYmVmb3Jl IHByb2JlLCB0aGUgYWJvdmUKPj4+Pj4gcG1fcnVudGltZV9wdXRfbm9pZGxlKCkgd291bGQgYWN0 dWFsbHkgaW50cm9kdWNlIGFuIGltYmFsYW5jZS4KPj4+Pgo+Pj4+IE5vLCBpdCB3b3VsZG4ndC4g IEl0IGJhbGFuY2VzIHRoZSBpbmNyZW1lbnRhdGlvbiBpbiBwbV9ydW50aW1lX2ZvcmJpZCgpLgo+ Pj4KPj4+IFJpZ2h0LCBidXQgZXZlbiBpZiB5b3UgdGFrZSB0aGUgd2hvbGUgc2VxdWVuY2UsIHdo aWNoIGluY2x1ZGVkCj4+PiBwbV9ydW50aW1lX2ZvcmJpZCgpLCBjb25zaWRlciB3aGF0IGhhcHBl bnMgd2hlbiBwbV9ydW50aW1lX2FsbG93KCkgaXMKPj4+IGxhdGVyIGNhbGxlZCB0aHJvdWdoIHN5 c2ZzIChzZWUgYmVsb3cpLgo+Pj4KPj4+Pj4gQW5kIG5vdGUgdGhhdCB0aGF0J3MgYWxzbyB0aGUg Y2FzZSBldmVuIGlmIHlvdSBtZWFudCB0byBzYXkgdGhhdAo+Pj4+PiAqcG1fcnVudGltZV9mb3Ji aWQoKSogaW5jcmVtZW50cyB0aGUgdXNhZ2UgY291bnRlciAod2hpY2ggaXQgZG9lcykuCj4+Pj4K Pj4+PiBXaHkgaXMgaXQ/Cj4+Pj4KPj4+PiBTdXJlbHksIGFmdGVyCj4+Pj4KPj4+PiBwbV9ydW50 aW1lX2ZvcmJpZChkZXYpOwo+Pj4+IHBtX3J1bnRpbWVfcHV0X25vaWRsZShkZXYpOwo+Pj4+Cj4+ Pj4gdGhlIHJ1bnRpbWUgUE0gdXNhZ2UgY291bnRlciBvZiBkZXYgd2lsbCBiZSB0aGUgc2FtZSBh cyBiZWZvcmUsIHdvbid0IGl0Pwo+Pj4KPj4+IFN1cmUsIGJ1dCB0aGUgaW1iYWxhbmNlLCBvciBy YXRoZXIgaW5jb25zaXN0ZW50IHN0YXRlLCBoYXMgYWxyZWFkeSBiZWVuCj4+PiBpbnRyb2R1Y2Vk Lgo+Pj4KPj4+IENvbnNpZGVyIHRoZSBmb2xsb3dpbmcgc2VxdWVuY2Ugb2YgZXZlbnRzOgo+Pj4K Pj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB1c2FnZSBjb3VudAo+ Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDAKPj4+IHByb2JlKCkK Pj4+ICAgICAgICAgcG1fcnVudGltZV9mb3JiaWQoKSAgICAgICAgICAgICAxCgpDYW4geW91IGNh bGwgcG1fcnVudGltZV9mb3JiaWQoKSBiZWZvcmUgcG1fcnVudGltZV9lbmFibGUoKT8KV291bGRu J3QgaXQgZmFpbCB3aXRoIC1FQUNDRVMgYXMgZGV2LT5wb3dlci5kaXNhYmxlX2RlcHRoID4gMD8K Cj4+PiAgICAgICAgIHBtX3J1bnRpbWVfc2V0X2FjdGl2ZSgpCj4+PiAgICAgICAgIHBtX3J1bnRp bWVfZW5hYmxlKCkKPj4+ICAgICAgICAgcG1fcnVudGltZV9wdXRfbm9pZGxlKCkgICAgICAgICAw Cj4+Pgo+Pj4gSGVyZSBub3RoaW5nIGlzIHByZXZlbnRpbmcgdGhlIGRldmljZSBmcm9tIHJ1bnRp bWUgc3VzcGVuZGluZywgZGVzcGl0ZQo+Pj4gcnVudGltZSBQTSBiZWluZyBmb3JiaWRkZW4uIElu IGZhY3QsIGl0IHdpbGwgdHlwaWNhbGx5IGJlIHN1c3BlbmRlZCBkdWUKPj4+IHRvIHRoZSBwbV9y ZXF1ZXN0X2lkbGUoKSBpbiBkcml2ZXJfcHJvYmVfZGV2aWNlKCkuIElmIGxhdGVyIHdlIGhhdmU6 Cj4+Pgo+Pj4gZWNobyBhdXRvID4gcG93ZXIvY29udHJvbAo+Pj4gICAgICAgICBwbV9ydW50aW1l X2FsbG93KCkgICAgICAgICAgICAgIC0xCj4+Cj4+IE9LLCB5b3UgaGF2ZSBhIHBvaW50Lgo+Pgo+ PiBBZnRlciBjYWxsaW5nIHBtX3J1bnRpbWVfZm9yYmlkKCkgdGhlIGRyaXZlciBzaG91bGQgYWxs b3cgdXNlciBzcGFjZQo+PiB0byB1bmJsb2NrIHJ1bnRpbWUgUE0gZm9yIHRoZSBkZXZpY2UgLSBv ciBjYWxsIHBtX3J1bnRpbWVfYWxsb3coKQo+PiBpdHNlbGYuCj4gCj4gVGhlIGNvbmZ1c2lvbiBy ZWdhcmRpbmcgdGhlIHBtX3J1bnRpbWVfcHV0X25vaWRsZSgpIGF0IHRoZSBlbmQgbWF5Cj4gY29t ZSBmcm9tIHRoZSBzcGVjaWFsIHJlcXVpcmVtZW50IG9mIHRoZSBQQ0kgYnVzIHR5cGUgYXMgcGVy IHRoZQo+IGNvbW1lbnQgaW4gbG9jYWxfcGNpX3Byb2JlKCkuCj4gCgpPSy4gU28gaXQgaXMgdGhl IFBDSSBidXMgd2hpY2ggaXMgYmVoYXZpbmcgb2RkIGhlcmUgYW5kCnBtX3J1bnRpbWVfcHV0X25v aWRsZSgpIG5lZWRzIHRvIGJlIGRvbmUgb25seSBpZiBpdHMgYSBQQ0kgZGV2aWNlLCBjb3JyZWN0 Pwo=