Chris Wulff 0aea736ddb usb: gadget: f_fs: Fix a race condition when processing setup packets. ... If the USB driver passes a pointer into the TRB buffer for creq, this buffer can be overwritten with the status response as soon as the event is queued. This can make the final check return USB_GADGET_DELAYED_STATUS when it shouldn't. Instead use the stored wLength. Fixes: 4d644abf25 ("usb: gadget: f_fs: Only return delayed status when len is 0") Cc: stable <stable@kernel.org> Signed-off-by: Chris Wulff <chris.wulff@biamp.com> Link: https://lore.kernel.org/r/CO1PR17MB5419BD664264A558B2395E28E1112@CO1PR17MB5419.namprd17.prod.outlook.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-23 16:26:10 -07:00
..
function	usb: gadget: f_fs: Fix a race condition when processing setup packets.	2024-04-23 16:26:10 -07:00
legacy	usb: gadget: webcam: Make g_webcam loadable again	2023-12-15 18:27:38 +01:00
udc	usb: gadget: fsl: Initialize udc before using it	2024-04-05 08:08:37 +02:00
composite.c	usb: gadget: composite: fix OS descriptors w_value logic	2024-04-23 16:11:48 -07:00
config.c	usb: gadget: config: remove max speed check in usb_assign_descriptors()	2023-08-22 14:48:33 +02:00
configfs.c	usb: gadget: configfs: Replace snprintf() with the safer scnprintf() variant	2023-12-15 13:55:29 +01:00
configfs.h
epautoconf.c
functions.c
Kconfig	usb: gadget: functionfs: Add DMABUF import interface	2024-02-17 17:00:09 +01:00
Makefile	usb: gadget: Makefile: remove ccflags-y	2022-03-18 12:56:08 +01:00
u_f.c
u_f.h
u_os_desc.h
usbstring.c