usb: gadget: gadgetfs: fix an oops in ep_write()

PATCH New Dan Carpenter 1 participant 1 message Jan 6, 2015

Subsystems (2)

USB Kernel janitors

lore

Share & tools

lore

Dan Carpenter

author

2015-01-06 10:19 UTC #0 lore raw

PATCH 1/1 usb: gadget: gadgetfs: fix an oops in ep_write()

We try to free an ERR_PTR on this error path.

Fixes b44be2462dbe ('usb: gadget: gadgetfs: Free memory allocated by memdup_user()')

Signed-off-by Dan Carpenter <[email protected]>

drivers/usb/gadget/legacy/inode.c +1 -0

index 0804861..db49ec4 100644
@@ -441,6 +441,7 @@ ep_write (struct file *fd, const char __user *buf, size_t len, loff_t *ptr)
 	kbuf = memdup_user(buf, len);
 	if (IS_ERR(kbuf)) {
 		value = PTR_ERR(kbuf);
+		kbuf = NULL;
 		goto free1;
 	}