From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Subject: usb: dwc3: of-simple: fix use-after-free on remove From: Tero Kristo Message-Id: Date: Tue, 19 Jun 2018 15:10:37 +0300 To: Felipe Balbi , Roger Quadros , Johan Hovold Cc: Greg Kroah-Hartman , Alan Stern , linux-usb@vger.kernel.org, "Nori, Sekhar" , Grygorii Strashko , Tony Lindgren , Nishanth Menon List-ID: T24gMTkvMDYvMTggMTE6MTgsIEZlbGlwZSBCYWxiaSB3cm90ZToKPiAKPiBIaSwKPiAKPiBSb2dl ciBRdWFkcm9zIDxyb2dlcnFAdGkuY29tPiB3cml0ZXM6Cj4+Pj4+Pj4+IEkgc3VnZ2VzdCBtZXJn aW5nIHRoaXMgZml4IGZvciA0LjE4LXJjLCBhbmQgdGhlbiBSb2dlciBjYW4gcmV3b3JrIHRoZQo+ Pj4+Pj4+PiBkcml2ZXIgc28gdGhhdCBpdCB3b3JrcyBhbHNvIG9uIE9NQVAuCj4+Pj4+Pj4KPj4+ Pj4+PiBvbWFwIGhhcyBpdHMgb3duIGdsdWUgbGF5ZXIgZm9yIHNldmVyYWwgcmVhc29ucy4gSWYg eW91J3JlIHRhbGtpbmcgYWJvdXQKPj4+Pj4+PiBLZXlzdG9uZSBkZXZpY2VzLCB0aGVuIG9rYXks IEkgdW5kZXJzdGFuZC4gQnV0IGluIHRoYXQgY2FzZSwgdGhpcyB3b3VsZAo+Pj4+Pj4+IG1lYW4g S2V5c3RvbmUgaXMgY29weWluZyB0aGUgc2FtZSBhcmd1YWJseSBicm9rZW4gUE0gZG9tYWluIGRl c2lnbiBmcm9tCj4+Pj4+Pj4gT01BUCBhbmQgaXQgd291bGQgYmUgYmVzdCBub3QgdG8gcHJvcGFn YXRlIHRoYXQgaWRlYS4KPj4+Pj4+Cj4+Pj4+PiBNYXliZSBzby4gSSdtIG5vdCBzdXJlIHdoYXQg Um9nZXIncyB1c2UgY2FzZSBpcywgYnV0IHBlcmhhcHMgdGhlIG9tYXAKPj4+Pj4+IGdsdWUgZHJp dmVyIGNvdWxkIGJlIHVzZWQgaW5zdGVhZC4KPj4+Pj4KPj4+Pj4gdW5saWtlbHkuIEtleXN0b25l IGRldmljZXMgYXJlIHZlcnkgZGlmZmVyZW50IGZyb20gT01BUCBmYW1pbHkuIEJ1dAo+Pj4+PiB3 ZSdsbCBzZWUgd2hhdCBSb2dlciBzYXlzLgo+Pj4+Pgo+Pj4+Cj4+Pj4gV2VsbCwgSSB3YXMgY29u c2lkZXJpbmcgdG8gdXNlIG9mLXNpbXBsZSBmb3IgdGhlIEFNNjU0IFNvQyBbMV0gYnV0IG5vdwo+ Pj4+IEknbSBvZiB0aGUgb3BpbmlvbiB0aGF0IGl0IG1pZ2h0IGJlIGJldHRlciB0byBhZGQgYSBu ZXcgZ2x1ZSBsYXllciBkcml2ZXIKPj4+Cj4+PiB3aHkgaXNuJ3QgZHdjMy1rZXlzdG9uZS5jIGVu b3VnaD8KPj4KPj4gSXQgaXMgZG9pbmcgdG9vIG1hbnkgdGhpbmdzIHRoYW4gd2UgcmVhbGx5IG5l ZWQgdG8gZm9yIEFNNjU0Lgo+IAo+IEknbSBhc3N1bWluZyB5b3UgbWVhbnQgeW91IHJlYWxseSBk b24ndCBuZWVkIGZvciBBTTY1NC4gVGhhdCBjYW4gYmUgbWFkZQo+IG9wdGlvbmFsIHdpdGggdGhl IHVzZSBvZiBhIGRpZmZlcmVudCBjb21wYXRpYmxlLCByaWdodD8KPiAKPj4+PiBmb3IgdGhhdCBi ZWNhdXNlCj4+Pj4gLSBpdCBuZWVkcyB0byBwb2tlIGEgZmV3IHJlZ2lzdGVycyBpbiB0aGUgd3Jh cHBlciByZWdpb24KPj4+Cj4+PiBkd2MzLWtleXN0b25lLmMgZG9lcyB0aGF0IGFscmVhZHkKPj4+ Cj4+Pj4gLSBpdCBkb2Vzbid0IHJlYWxseSBuZWVkIHRoZSBkcml2ZXIgdG8gZW5hYmxlIGFueSBj bG9jawo+Pj4KPj4+IFNlZW1zIHRvIG1lIHlvdSdyZSB0cnlpbmcgdG8gcG9ydCBvbWFwX2Rldmlj ZSB0byBhcm02NC4uLgo+Pgo+PiBJdCBpc24ndCBhbiBvbWFwX2RldmljZSBidXQgaXMgdmVyeSBz aW1pbGFyIHRvIGhvdyBpdCBpcyBkb25lIG9uCj4+IGtleXN0b25lLgo+IAo+IEZhaXIgZW5vdWdo Cj4gCj4+Pj4gLSBpdCBuZWVkcyBhIHBtX3J1bnRpbWVfZ2V0X3N5bmMoKSB0byBiZSBkb25lIGlu IHByb2JlCj4+Pgo+Pj4gdGhpcyByZWFsbHkgc2hvdWxkbid0IGJlIG5lY2Vzc2FyeS4gS2V5c3Rv bmUgZG9lc24ndCByZWx5IG9uIGFsbCB0aGUKPj4+IG9tYXBfZGV2aWNlIGxlZ2FjeS4gQXQgbGVh c3QgaXQgZGlkbid0IHVzZSB0by4gQ291bGQgaXQgYmUgdGhhdCB5b3UncmUKPj4+IGp1c3QgbWlz c2luZyBhIHN0cnVjdCBkZXZfcG1fZG9tYWluIGRlZmluaXRpb24gZm9yIGFybTY0Pwo+Pgo+PiBJ IGRvbid0IHRoaW5rIHNvLiBJZiBJIGhhZCBtaXNzZWQgaXQgaXQgd291bGRuJ3QgZW5hYmxlIGF0 IGFsbC4KPiAKPiBhcm02NCBkb2Vzbid0IGRlZmluZSBvd24gcG1fZG9tYWluLgo+IAo+Pj4gSSBo YXZlbid0IHNlZW4gaG93IHlvdSBndXlzIGltcGxlbWVudGVkIHlvdXIgUE0gZm9yIGFybTY0IChp cyB0aGVyZSBhCj4+PiBwdWJsaWNhbGx5IGFjY2Vzc2libGUgdmVyc2lvbiBzb21ld2hlcmU/KSwg YnV0IEknZCBzYXkgeW91IHNob3VsZCB0YWtlCj4+PiB0aGUgb3Bwb3J0dW5pdHkgdG8gcmVtb3Zl IHRoaXMgcmVseWluZyBvbiBwbV9ydW50aW1lX2dldF9zeW5jKCkgY2FsbHMKPj4+IGZyb20gcHJv YmUgYW5kIGp1c3QgZG8gd2hhdCBldmVyeWJvZHkgZWxzZSBkb2VzOyBuYW1lbHk6IGVuYWJsZSBj bG9ja3MKPj4+IG9uIHByb2JlLCBwbV9ydW50aW1lX3NldF9hY3RpdmUsIGV0Yy4KPj4KPj4gVGhp cyBpcyBzb21ldGhpbmcgVGVybyBjYW4gY29tbWVudCBvbi4KClRJIFNvQyBhcm02NCBQTSBpcyBk b25lIHZpYSBnZW5wZCBhdHRhY2hlZCB0byBlYWNoIGRvbWFpbiwgd2hpY2ggaW4gdHVybiAKcGFz c2VzIGNvbnRyb2wgbWVzc2FnZXMgdG8gdGhlIFBNIGZpcm13YXJlIHdoZW4gdHJhbnNpdGlvbnMg aGFwcGVuLiBTZWUgCmRyaXZlcnMvc29jL3RpX3NjaV9wbV9kb21haW5zLmMgZm9yIGRldGFpbHMu CgpOb3QgcXVpdGUgc3VyZSBhYm91dCB0aGUgZGlzY3Vzc2lvbiBmb2xsb3dpbmcgbGF0ZXIsIGJ1 dCB0aGVyZSBpcyB3b3JrIApvbmdvaW5nIHRvIGdldCByaWQgb2YgYm90aCBvbWFwX2h3bW9kIGFu ZCBvbWFwX2RldmljZSwgYW5kIHJlcGxhY2UgdGhpcyAKd2l0aCBhIHByb3BlciBidXMgZHJpdmVy IGZvciBPTUFQIGFyY2hpdGVjdHVyZXMuIEl0IG1pZ2h0IHNvbHZlIHRoZSAKaXNzdWVzIGJlaW5n IHRhbGtlZCBhYm91dCwgb3IgdGhlbiBub3QuIFRvbnksIGFueSBjb21tZW50cyBvbiB0aGF0PwoK QW55d2F5LCBtYWluIHJlYXNvbiB0aGF0IG9tYXAgZGV2aWNlcyBhcmUgYWN0dWFsbHkgc3VzcGVu ZGVkIG9uIEhXIGxldmVsIApkdXJpbmcgcHJvYmUgaXMgdGhlIGFnZ3Jlc3NpdmUgcG93ZXIgbWFu YWdlbWVudCBhcHBsaWVkIG9uIHRoZSBkZXZpY2UsIAphbmQgYmFzZWQgb24gdGhlIGRvY3VtZW50 YXRpb24gdGhpcyBpcyBhY3R1YWxseSBhIHZhbGlkIHRoaW5nIHRvIGRvLiAKVGhpcyBtYWtlcyBz dXJlIHRoYXQgYWxsIGRldmljZXMgZ2V0IHRvIGlkbGUgaWYgdGhleSBhcmUgbm90IHVzZWQgKG5v IApkcml2ZXIgcHJvYmVkIGV0Yy4pLCBhbmQgd2lsbCBhbGxvdyB0aGUgU29DIHRvIGlkbGUgY29y ZSBwb3dlcmRvbWFpbi4KCi1UZXJvCi0tLQpUZXhhcyBJbnN0cnVtZW50cyBGaW5sYW5kIE95LCBQ b3Jra2FsYW5rYXR1IDIyLCAwMDE4MCBIZWxzaW5raS4gWS10dW5udXMvQnVzaW5lc3MgSUQ6IDA2 MTU1MjEtNC4gS290aXBhaWtrYS9Eb21pY2lsZTogSGVsc2lua2kKLS0KVG8gdW5zdWJzY3JpYmUg ZnJvbSB0aGlzIGxpc3Q6IHNlbmQgdGhlIGxpbmUgInVuc3Vic2NyaWJlIGxpbnV4LXVzYiIgaW4K dGhlIGJvZHkgb2YgYSBtZXNzYWdlIHRvIG1ham9yZG9tb0B2Z2VyLmtlcm5lbC5vcmcKTW9yZSBt YWpvcmRvbW8gaW5mbyBhdCAgaHR0cDovL3ZnZXIua2VybmVsLm9yZy9tYWpvcmRvbW8taW5mby5o dG1sCg==