diff options
author | Oliver Neukum <oneukum@suse.de> | 2007-06-13 12:50:41 -0400 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@suse.de> | 2007-06-26 02:38:06 -0400 |
commit | 74ac07e8b8209ba9429fa1a9afc07aa5ecef5af8 (patch) | |
tree | 113b8f6253ac3ece264c482ce16880e3ec6b2244 /fs/quota_v1.c | |
parent | 5afeb104e7901168b21aad0437fb51dc620dfdd3 (diff) |
USB: fix race leading to use after free in io_edgeport
usb_unlink_urb() is asynchronous, therefore an URB's buffer may not
be freed without waiting for the completion handler. This patch switches
to usb_kill_urb(), which is synchronous.
Thanks to Alan for making me look at the remaining users of usb_unlink_urb()
Signed-off-by: Oliver Neukum <oneukum@suse.de>
Signed-off-by: Al Borchers <alborchers@steinerpoint.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'fs/quota_v1.c')
0 files changed, 0 insertions, 0 deletions