Re: [PATCH] USB: EHCI: tegra: Fix use-after-free in .remove()

2014-06-17 Thread Alan Stern
On Tue, 17 Jun 2014, Stephen Warren wrote: > On 06/17/2014 08:17 AM, Tuomas Tynkkynen wrote: > > The tegra_ehci_hcd structure is located in the private space allocated > > by the core USB code so it must not be accessed after the HCD is > > freed. > > > diff --git a/drivers/usb/host/ehci-tegra.c

Re: [PATCH] USB: EHCI: tegra: Fix use-after-free in .remove()

2014-06-17 Thread Stephen Warren
On 06/17/2014 08:17 AM, Tuomas Tynkkynen wrote: > The tegra_ehci_hcd structure is located in the private space allocated > by the core USB code so it must not be accessed after the HCD is > freed. > diff --git a/drivers/usb/host/ehci-tegra.c b/drivers/usb/host/ehci-tegra.c This seems to be a pers

Re: [PATCH] USB: EHCI: tegra: Fix use-after-free in .remove()

2014-06-17 Thread Alan Stern
On Tue, 17 Jun 2014, Tuomas Tynkkynen wrote: > The tegra_ehci_hcd structure is located in the private space allocated > by the core USB code so it must not be accessed after the HCD is > freed. > > Signed-off-by: Tuomas Tynkkynen > --- > drivers/usb/host/ehci-tegra.c | 3 ++- > 1 file changed,

[PATCH] USB: EHCI: tegra: Fix use-after-free in .remove()

2014-06-17 Thread Tuomas Tynkkynen
The tegra_ehci_hcd structure is located in the private space allocated by the core USB code so it must not be accessed after the HCD is freed. Signed-off-by: Tuomas Tynkkynen --- drivers/usb/host/ehci-tegra.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/usb/host/