Vamsi Krishna Samavedam a4b98a7512 usb: gadget: f_fs: Use local copy of descriptors for userspace copy ... The function may be unbound causing the ffs_ep and its descriptors to be freed while userspace is in the middle of an ioctl requesting the same descriptors. Avoid dangling pointer reference by first making a local copy of desctiptors before releasing the spinlock. Fixes: c559a35341 ("usb: gadget: f_fs: add ioctl returning ep descriptor") Reviewed-by: Peter Chen <peter.chen@nxp.com> Signed-off-by: Vamsi Krishna Samavedam <vskrishn@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20201130203453.28154-1-jackp@codeaurora.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-12-04 16:09:10 +01:00
..
function	usb: gadget: f_fs: Use local copy of descriptors for userspace copy	2020-12-04 16:09:10 +01:00
legacy	usb: gadget: Fix memleak in gadgetfs_fill_super	2020-11-20 16:32:46 +01:00
udc	usb: gadget: fsl: fix null pointer checking	2020-10-27 10:57:24 +02:00
composite.c	usb: fix kernel-doc markups	2020-10-28 13:18:56 +01:00
config.c	USB: gadget: Remove redundant license text	2017-11-07 15:45:02 +01:00
configfs.c	USB: replace hardcode maximum usb string length by definition	2020-06-18 16:07:57 +02:00
configfs.h
epautoconf.c	usb: gadget: move non-super speed code out of usb_ep_autoconfig_ss()	2019-02-07 13:14:51 +02:00
functions.c	USB: add SPDX identifiers to all remaining files in drivers/usb/	2017-11-04 11:48:02 +01:00
Kconfig	USB: Fix up terminology	2020-07-01 14:04:04 +02:00
Makefile	Revert "usb:gadget Separated decoding functions from dwc3 driver."	2019-07-04 13:02:09 +02:00
u_f.c	usb: gadget: Change Andrzej Pietrasiewicz's e-mail address	2019-02-11 11:12:29 +02:00
u_f.h	USB: gadget: u_f: Unbreak offset calculation in VLAs	2020-08-27 09:25:06 +02:00
u_os_desc.h	usb: gadget: Change Andrzej Pietrasiewicz's e-mail address	2019-02-11 11:12:29 +02:00
usbstring.c	usb: gadget: fix langid kernel-doc warning in usbstring.c	2020-07-09 10:13:07 +03:00