From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Subject: usb:dwc3:fix access poisoned list_head in dwc3_gadget_giveback From: Felipe Balbi Message-Id: <87fu7glgjg.fsf@linux.intel.com> Date: Mon, 08 Jan 2018 13:46:11 +0200 To: Yu Chen , gregkh@linuxfoundation.org, linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org Cc: wangbinghui@hisilicon.com List-ID: SGksCgpZdSBDaGVuIDxjaGVueXU1NkBodWF3ZWkuY29tPiB3cml0ZXM6Cj4gRnJvbTogWXUgQ2hl biA8Y2hlbnl1NTZAaHVhd2VpLmNvbT4KPgo+IFVuYWJsZSB0byBoYW5kbGUga2VybmVsIHBhZ2lu ZyByZXF1ZXN0IGF0IHZpcnR1YWwgYWRkcmVzcyBkZWFkMDAwMDAwMDAwMTA4Cj4gcGdkID0gZmZm ZmZmZjdhMzE3OTAwMAo+IFtkZWFkMDAwMDAwMDAwMTA4XSAqcGdkPTAwMDAwMDAwMjMwZTAwMDMs ICpwdWQ9MDAwMDAwMDAyMzBlMDAwMywKPiAqcG1kPTAwMDAwMDAwMDAwMDAwMDAKPiBJbnRlcm5h bCBlcnJvcjogT29wczogOTYwMDAwNDQgWyMxXSBQUkVFTVBUIFNNUAo+IE1vZHVsZXMgbGlua2Vk IGluOgo+IENQVTogMiBQSUQ6IDEgQ29tbTogaW5pdCBUYWludGVkOiBHICAgICAgICBXICAgICAg IDQuNC4yMysgIzEKCnRyeSBtYWlubGluZQoKPiBUR0lEOiAxIENvbW06IGluaXQKPiBIYXJkd2Fy ZSBuYW1lOiBraXJpbjk3MCAoRFQpCj4gdGFzazogZmZmZmZmZjk5ZjE5MDAwMCB0aTogZmZmZmZm Zjk5ZjE3NDBlMCB0YXNrLnRpOiBmZmZmZmZmOTlmMTc0MGUwCj4gUEMgaXMgYXQgZHdjM19nYWRn ZXRfZ2l2ZWJhY2srMHhhOC8weDIyOAo+IExSIGlzIGF0IGR3YzNfcmVtb3ZlX3JlcXVlc3RzKzB4 NDQvMHg4OAo+Cj4gVGhlIGNyYXNoIG9jY3VycmVkIHdoZW4gdXNiIHdvcmsgYXMgcm5kaXMgZGV2 aWNlIGFuZAo+IF9fZHdjM19nYWRnZXRfa2lja190cmFuc2ZlciByZXR1cm4gZXJyb3IgaW4gX19k d2MzX2dhZGdldF9lcF9xdWV1ZS4KPiBUaGUgcmVxdWVzdCBzdWJtaXRlZCBpbiBfX2R3YzNfZ2Fk Z2V0X2VwX3F1ZXVlIGlzIG1vdmVkIHRvIHN0YXJ0ZWRfbGlzdAo+IGJ1dCBub3Qga2lja2VkLiBJ dCBpcyBzdGlsIG9uIHN0YXJ0ZWRfbGlzdCBhbHRob3VnaAo+IF9fZHdjM19nYWRnZXRfa2lja190 cmFuc2ZlciBmYWlsZWQuIFdoZW4gZHdjM19nYWRnZXRfZXBfcXVldWUgcmV0dXJuCgp3aHkgZGlk IGtpY2tfdHJhbnNmZXIgZmFpbD8gV2hlcmUgYXJlIHRoZSB0cmFjZXBvaW50cyBzaG93aW5nIHRo ZQpmYWlsdXJlPwoKPiBlcnJvciB0byB1X2V0aGVyIGRyaXZlciwgdGhlIHJlcXVlc3Qgd2lsbCBi ZSByZXN1Ym1pdCB0byBkd2MzIGRyaXZlci4KPiBBdCBsYXN0LCB0aGUgc2FtZSByZXF1ZXN0IGlz IGJvdGggb24gc3RhcnRlZF9saXN0IGFuZCBwZW5kaW5nX2xpc3QsCj4gaXQgd2lsbCBiZSBsaXN0 X2RlbCB0d2ljZSBpbiBkd2MzX3JlbW92ZV9yZXF1ZXN0cyBhbmQgY2F1c2UgY3Jhc2guCj4KPiBT aWduZWQtb2ZmLWJ5OiBZdSBDaGVuIDxjaGVueXU1NkBodWF3ZWkuY29tPgo+IC0tLQo+ICBkcml2 ZXJzL3VzYi9kd2MzL2dhZGdldC5jIHwgMjggKysrKysrKysrKysrKysrKysrKysrKysrKysrLQo+ ICAxIGZpbGUgY2hhbmdlZCwgMjcgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQo+Cj4gZGlm ZiAtLWdpdCBhL2RyaXZlcnMvdXNiL2R3YzMvZ2FkZ2V0LmMgYi9kcml2ZXJzL3VzYi9kd2MzL2dh ZGdldC5jCj4gaW5kZXggNjM5ZGQxYjE2M2EwLi5hOTEzZTY0Y2E0ZTAgMTAwNjQ0Cj4gLS0tIGEv ZHJpdmVycy91c2IvZHdjMy9nYWRnZXQuYwo+ICsrKyBiL2RyaXZlcnMvdXNiL2R3YzMvZ2FkZ2V0 LmMKPiBAQCAtMTI3OCw5ICsxMjc4LDI4IEBAIHN0YXRpYyB2b2lkIGR3YzNfZ2FkZ2V0X3N0YXJ0 X2lzb2Moc3RydWN0IGR3YzMgKmR3YywKPiAgCV9fZHdjM19nYWRnZXRfc3RhcnRfaXNvYyhkd2Ms IGRlcCwgY3VyX3VmKTsKPiAgfQo+ICAKPiArc3RhdGljIGludCBkd2MzX2dhZGdldF9pc19yZXFf cGVuZ2Rpbmdfb3Jfc3RhcnRlZChzdHJ1Y3QgZHdjM19lcCAqZGVwLAo+ICsJCXN0cnVjdCBkd2Mz X3JlcXVlc3QgKnJlcSkKPiArewo+ICsJc3RydWN0IGR3YzNfcmVxdWVzdCAqaXRlcmF0ZV9yZXE7 Cj4gKwo+ICsJbGlzdF9mb3JfZWFjaF9lbnRyeShpdGVyYXRlX3JlcSwgJmRlcC0+cGVuZGluZ19s aXN0LCBsaXN0KSB7Cj4gKwkJaWYgKGl0ZXJhdGVfcmVxID09IHJlcSkKPiArCQkJcmV0dXJuIDE7 Cj4gKwl9Cj4gKwo+ICsJbGlzdF9mb3JfZWFjaF9lbnRyeShpdGVyYXRlX3JlcSwgJmRlcC0+c3Rh cnRlZF9saXN0LCBsaXN0KSB7Cj4gKwkJaWYgKGl0ZXJhdGVfcmVxID09IHJlcSkKPiArCQkJcmV0 dXJuIDE7Cj4gKwl9Cj4gKwo+ICsJcmV0dXJuIDA7Cj4gK30KPiArCj4gIHN0YXRpYyBpbnQgX19k d2MzX2dhZGdldF9lcF9xdWV1ZShzdHJ1Y3QgZHdjM19lcCAqZGVwLCBzdHJ1Y3QgZHdjM19yZXF1 ZXN0ICpyZXEpCj4gIHsKPiAgCXN0cnVjdCBkd2MzCQkqZHdjID0gZGVwLT5kd2M7Cj4gKwlpbnQJ CQlyZXQ7Cj4gIAo+ICAJaWYgKCFkZXAtPmVuZHBvaW50LmRlc2MpIHsKPiAgCQlkZXZfZXJyKGR3 Yy0+ZGV2LCAiJXM6IGNhbid0IHF1ZXVlIHRvIGRpc2FibGVkIGVuZHBvaW50XG4iLAo+IEBAIC0x MzM0LDcgKzEzNTMsMTQgQEAgc3RhdGljIGludCBfX2R3YzNfZ2FkZ2V0X2VwX3F1ZXVlKHN0cnVj dCBkd2MzX2VwICpkZXAsIHN0cnVjdCBkd2MzX3JlcXVlc3QgKnJlcSkKPiAgCX0KPiAgCj4gIG91 dDoKPiAtCXJldHVybiBfX2R3YzNfZ2FkZ2V0X2tpY2tfdHJhbnNmZXIoZGVwKTsKPiArCXJldCA9 IF9fZHdjM19nYWRnZXRfa2lja190cmFuc2ZlcihkZXApOwo+ICsJaWYgKHJldCAmJiBkd2MzX2dh ZGdldF9pc19yZXFfcGVuZ2Rpbmdfb3Jfc3RhcnRlZChkZXAsIHJlcSkpIHsKCmZpcnN0IHdlIG5l ZWQgdG8gZmlndXJlIG91dCB3aHkga2lja190cmFuc2ZlciBmYWlsZWQuIEl0IHNob3VsZG4ndCBm YWlsLApzbyB3aHkgZGlkIGl0PyBUaGVuIEkgbmVlZCB5b3UgdG8gdHJ5IHdpdGggYSBtb3JlIHJl Y2VudCBrZXJuZWwgdjQuNCBpcwpyYXRoZXIgb2xkIGFuZCBhIGxvdCBoYXMgY2hhbmdlZCBXUlQg dHJhbnNmZXIgaGFuZGxpbmc6CgokIGdpdCByZXYtbGlzdCAtLWNvdW50IC0tbm8tbWVyZ2VzIHY0 LjQuLmxpbnVzL21hc3RlciAtLSBkcml2ZXJzL3VzYi9kd2MzL2dhZGdldC5jCjE4NAo=