USB: iowarrior: disconnect fixes and locking cleanups
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest6 patches 1 replyIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/6 | USB: iowarrior: fix use-after-free on disconnectdrivers/ | +3 | 0 replies | |
| 2/6 | USB: iowarrior: fix use-after-free on releasedrivers/ | +2 | 0 replies | |
| 3/6 | USB: iowarrior: fix use-after-free after driver unbinddrivers/ | +6 | 0 replies | |
| 4/6 | USB: iowarrior: drop redundant disconnect mutexdrivers/ | +2 | 0 replies | |
| 5/6 | USB: iowarrior: drop redundant iowarrior mutexdrivers/ | +1 | 0 replies | |
| 6/6 | USB: iowarrior: use pr_err()drivers/ | +1 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/6] USB: iowarrior: disconnect fixes and locking cleanups
This series fixes a use-after-free bug introduced by a recent disconnect-deadlock fix that was reported by syzbot. Turns out there was already a related bug in the driver, and the first patch addresses both issues.
While looking at the code I found two more use-after-free bugs, which the next two patches fix.
The next two clean up the driver by dropping two redundant locks.
Tested using a mockup device.
Johan
Johan Hovold (6):
USB: iowarrior: fix use-after-free on disconnect
USB: iowarrior: fix use-after-free on release
USB: iowarrior: fix use-after-free after driver unbind
USB: iowarrior: drop redundant disconnect mutex
USB: iowarrior: drop redundant iowarrior mutex
USB: iowarrior: use pr_err()
drivers/usb/misc/iowarrior.c | 48 +++++++++++------------------------- 1 file changed, 15 insertions(+), 33 deletions(-)
Signature · 1 line
2.23.0