diff options
| author | Mathias Nyman <[email protected]> | 2017-07-20 14:48:26 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2017-07-20 14:40:35 +0200 |
| commit | 4b895868bb2da60a386a17cde3bf9ecbc70c79f4 (patch) | |
| tree | b2cda155a97ff5e0e0cbc20889775cb03249e3f8 /tools/perf/util/trace-event-scripting.c | |
| parent | 3d69f3a8c2ed1c7f322d23145bc0c3d980ebbacb (diff) | |
xhci: Fix NULL pointer dereference when cleaning up streams for removed host
This off by one in stream_id indexing caused NULL pointer dereference and
soft lockup on machines with USB attached SCSI devices connected to a
hotpluggable xhci controller.
The code that cleans up pending URBs for dead hosts tried to dereference
a stream ring at the invalid stream_id 0.
ep->stream_info->stream_rings[0] doesn't point to a ring.
Start looping stream_id from 1 like in all the other places in the driver,
and check that the ring exists before trying to kill URBs on it.
Reported-by: rocko r <[email protected]>
Cc: <[email protected]>
Signed-off-by: Mathias Nyman <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'tools/perf/util/trace-event-scripting.c')
0 files changed, 0 insertions, 0 deletions