android_kernel_xiaomi_sm7250/drivers/net/wireless/rsi
Johan Hovold 94b4f57a9c rsi: fix use-after-free on failed probe and unbind
[ Upstream commit e93cd35101b61e4c79149be2cfc927c4b28dc60c ]

Make sure to stop both URBs before returning after failed probe as well
as on disconnect to avoid use-after-free in the completion handler.

Reported-by: syzbot+b563b7f8dbe8223a51e8@syzkaller.appspotmail.com
Fixes: a4302bff28 ("rsi: add bluetooth rx endpoint")
Fixes: dad0d04fa7 ("rsi: Add RS9113 wireless driver")
Cc: stable <stable@vger.kernel.org>     # 3.15
Cc: Siva Rebbagondla <siva.rebbagondla@redpinesignals.com>
Cc: Prameela Rani Garnepudi <prameela.j04cs@gmail.com>
Cc: Amitkumar Karwar <amit.karwar@redpinesignals.com>
Cc: Fariya Fatima <fariyaf@gmail.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-02-05 14:43:33 +00:00
..
Kconfig
Makefile
rsi_91x_coex.c
rsi_91x_core.c
rsi_91x_debugfs.c
rsi_91x_hal.c rsi: fix use-after-free on probe errors 2020-02-01 09:37:11 +00:00
rsi_91x_mac80211.c
rsi_91x_main.c
rsi_91x_mgmt.c rsi: release skb if rsi_prepare_beacon fails 2019-12-13 08:50:57 +01:00
rsi_91x_ps.c
rsi_91x_sdio_ops.c
rsi_91x_sdio.c rsi: add hci detach for hibernation and poweroff 2020-02-05 14:43:33 +00:00
rsi_91x_usb_ops.c
rsi_91x_usb.c rsi: fix use-after-free on failed probe and unbind 2020-02-05 14:43:33 +00:00
rsi_boot_params.h
rsi_coex.h
rsi_common.h
rsi_debugfs.h
rsi_hal.h
rsi_main.h
rsi_mgmt.h
rsi_ps.h
rsi_sdio.h
rsi_usb.h