USB: gadgetfs: fix copy_to_user while holding spinlock
authorAlan Stern <stern@rowland.harvard.edu>
Thu, 21 Sep 2017 20:12:01 +0000 (16:12 -0400)
committerBen Hutchings <ben@decadent.org.uk>
Mon, 1 Jan 2018 20:50:51 +0000 (20:50 +0000)
commit 6e76c01e71551cb221c1f3deacb9dcd9a7346784 upstream.

The gadgetfs driver as a long-outstanding FIXME, regarding a call of
copy_to_user() made while holding a spinlock.  This patch fixes the
issue by dropping the spinlock and using the dev->udc_usage mechanism
introduced by another recent patch to guard against status changes
while the lock isn't held.

Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Acked-by: Felipe Balbi <felipe.balbi@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.2: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/usb/gadget/inode.c

Simple merge