From: Takashi Iwai <tiwai@suse.de>
Date: Fri, 1 Jun 2012 08:06:23 +0000 (+0200)
Subject: xhci: Fix invalid loop check in xhci_free_tt_info()
X-Git-Tag: v3.5-rc3~11^2~8^2~2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=46ed8f00d8982e49f8fe2c1a9cea192f640cb3ba;p=pandora-kernel.git

xhci: Fix invalid loop check in xhci_free_tt_info()

xhci_free_tt_info() may access the invalid memory when it removes the
last entry but the list is not empty.  Then tt_next reaches to the
list head but it still tries to check the tt_info of that entry.

This patch fixes the bug and cleans up the messy code by rewriting
with a simple list_for_each_entry_safe().

This patch should be backported to kernels as old as 3.2, that contain
the commit 839c817ce67178ca3c7c7ad534c571bba1e69ebe "xhci: Store
information about roothubs and TTs."

Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
Reviewed-by: Oliver Neukum <oneukum@suse.de>
Cc: <stable@vger.kernel.org>
---

Reading git-diff-tree failed