Johan Hovold 028c49f5e0 USB: serial: quatech2: fix use-after-free in probe error path ... The interface read URB is submitted in attach, but was only unlinked by the driver at disconnect. In case of a late probe error (e.g. due to failed minor allocation), disconnect is never called and we would end up with active URBs for an unbound interface. This in turn could lead to deallocated memory being dereferenced in the completion callback. Fixes: f7a33e608d ("USB: serial: add quatech2 usb to serial driver") Cc: stable <stable@vger.kernel.org> # v3.5: 40d0473849 Signed-off-by: Johan Hovold <johan@kernel.org> Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-05-10 09:40:09 +02:00
..
aircable.c
ark3116.c
belkin_sa.c
belkin_sa.h
bus.c	USB: serial: clean up bus probe error handling	2015-02-26 17:13:05 +01:00
ch341.c	USB: serial: fix compare_const_fl.cocci warnings	2016-02-28 14:35:58 +01:00
console.c	tty: Fix tty_init_termios() declaration	2016-01-27 14:28:20 -08:00
cp210x.c	USB: serial: cp210x: clean up CRTSCTS flag code	2016-05-05 11:48:09 +02:00
cyberjack.c	USB: serial: fix returnvar.cocci warnings	2016-02-28 14:36:53 +01:00
cypress_m8.c	USB: cypress_m8: add endpoint sanity check	2016-03-31 09:28:46 -07:00
cypress_m8.h
digi_acceleport.c	USB: digi_acceleport: do sanity checking for the number of ports	2016-03-31 09:28:46 -07:00
empeg.c
ezusb_convert.pl
f81232.c	USB: f81232: fix some minor style issues	2015-03-27 17:36:29 +01:00
ftdi_sio_ids.h	USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices	2016-04-07 11:12:55 +02:00
ftdi_sio.c	USB: serial: ftdi_sio: constify ftdi_sio_quirk structures	2016-04-25 12:38:06 +02:00
ftdi_sio.h	USB: serial: fix compare_const_fl.cocci warnings	2016-02-28 14:35:58 +01:00
garmin_gps.c	USB: serial: fix returnvar.cocci warnings	2016-02-28 14:36:53 +01:00
generic.c	USB: serial: fix infinite wait_until_sent timeout	2015-03-07 03:44:14 +01:00
io_16654.h
io_edgeport.c	USB: serial: io_edgeport: fix memory leaks in probe error path	2016-05-10 09:39:30 +02:00
io_edgeport.h
io_ionsp.h
io_tables.h
io_ti.c	USB: io_ti: Remove extra blank lines separating functions	2015-10-09 12:23:50 +02:00
io_ti.h
io_usbvend.h	USB: io_ti: fix firmware download on big-endian machines (part 2)	2014-05-27 15:12:57 -07:00
ipaq.c	USB: ipaq.c: fix a timeout loop	2015-12-18 09:30:34 -08:00
ipw.c
ir-usb.c
iuu_phoenix.c	USB: serial: fix boolinit.cocci warnings	2016-02-28 14:36:53 +01:00
iuu_phoenix.h
Kconfig	Revert "USB: serial: add Moxa UPORT 11x0 driver"	2016-03-01 11:01:33 +01:00
keyspan_pda.c	USB: keyspan_pda: add new device id	2015-03-19 18:04:01 +01:00
keyspan_usa26msg.h
keyspan_usa28msg.h
keyspan_usa49msg.h
keyspan_usa67msg.h
keyspan_usa90msg.h
keyspan.c	USB: serial: keyspan: fix debug and error messages	2016-05-10 09:39:57 +02:00
keyspan.h
kl5kusb105.c	USB: serial: fix semicolon.cocci warnings	2016-02-28 14:36:53 +01:00
kl5kusb105.h
kobil_sct.c	USB-serial updates for v3.19-rc1	2014-11-26 10:41:46 -08:00
kobil_sct.h
Makefile	Revert "USB: serial: add Moxa UPORT 11x0 driver"	2016-03-01 11:01:33 +01:00
Makefile-keyspan_pda_fw
mct_u232.c	USB: mct_u232: add sanity checking in probe	2016-03-31 09:28:46 -07:00
mct_u232.h
metro-usb.c
mos7720.c	tty: Use termios c_*flag macros	2016-01-28 14:13:44 -08:00
mos7840.c	USB patches for 4.6-rc1	2016-03-17 14:24:26 -07:00
mxuport.c	USB: serial: mxuport: fix use-after-free in probe error path	2016-05-10 09:40:03 +02:00
navman.c
omninet.c
opticon.c	USB: opticon: fix non-atomic allocation in write path	2014-11-03 09:07:30 +01:00
option.c	USB: option: add "D-Link DWM-221 B1" device id	2016-04-07 12:12:09 +02:00
oti6858.c
oti6858.h
pl2303.c	USB: pl2303: fix baud-rate divisor calculations	2015-07-30 18:11:07 +02:00
pl2303.h	USB: pl2303: Remove support for Samsung I330	2015-04-29 12:34:24 +02:00
qcaux.c
qcserial.c	USB: qcserial: add Sierra Wireless EM74xx device ID	2016-03-02 09:35:32 +01:00
quatech2.c	USB: serial: quatech2: fix use-after-free in probe error path	2016-05-10 09:40:09 +02:00
safe_serial.c	USB: serial: fix boolinit.cocci warnings	2016-02-28 14:36:53 +01:00
sierra.c	USB: sierra: add 1199:68AB device ID	2015-07-28 09:27:50 +02:00
spcp8x5.c	USB: serial: add missing newlines to dev_<level> messages.	2014-03-12 12:44:50 -07:00
ssu100.c	USB: ssu100: fix overrun-error reporting	2014-11-19 16:22:22 +01:00
symbolserial.c	USB: symbolserial: Correct transferred data size	2015-08-18 10:06:22 -07:00
ti_usb_3410_5052.c	USB: ti_usb_3410_5052: Add Honeywell HGI80 ID	2015-11-16 14:07:01 +01:00
ti_usb_3410_5052.h	USB: ti_usb_3410_5052: Add Honeywell HGI80 ID	2015-11-16 14:07:01 +01:00
usb_debug.c
usb_wwan.c	USB: usb_wwan/option: generalize option_send_setup for other drivers	2015-10-09 12:42:40 +02:00
usb-serial-simple.c	USB: serial: Another Infineon flash loader USB ID	2015-11-23 10:32:59 +01:00
usb-serial.c	USB: serial: use IS_ENABLED() instead of checking for FOO || FOO_MODULE	2016-04-25 12:39:58 +02:00
usb-wwan.h	USB: usb_wwan/option: generalize option_send_setup for other drivers	2015-10-09 12:42:40 +02:00
visor.c	USB: serial: visor: fix crash on detecting device without write_urbs	2016-01-25 11:40:45 +01:00
visor.h
whiteheat.c	USB: whiteheat: fix potential null-deref at probe	2015-09-23 12:15:19 -07:00
whiteheat.h
wishbone-serial.c
xsens_mt.c	usb: serial: xsens_mt: always bind to interface number 1	2014-09-04 11:18:26 +02:00