usb: usbip: set buffer pointers to NULL after free
authorMichael Grzeschik <m.grzeschik@pengutronix.de>
Mon, 22 May 2017 11:02:44 +0000 (13:02 +0200)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 12 Oct 2017 14:27:09 +0000 (15:27 +0100)
commit1eebbac5c256d41d8322867ba067f3977cd3b789
tree3426d13fbc7014b725d82f1294dce8ae7a23d7df
parentb0af977f06498eb7eea268912d23f5d694d1f0e6
usb: usbip: set buffer pointers to NULL after free

commit b3b51417d0af63fb9a06662dc292200aed9ea53f upstream.

The usbip stack dynamically allocates the transfer_buffer and
setup_packet of each urb that got generated by the tcp to usb stub code.
As these pointers are always used only once we will set them to NULL
after use. This is done likewise to the free_urb code in vudc_dev.c.
This patch fixes double kfree situations where the usbip remote side
added the URB_FREE_BUFFER.

Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
Acked-by: Shuah Khan <shuahkh@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.2: adjust filenames]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/staging/usbip/stub_main.c
drivers/staging/usbip/stub_tx.c