isdn/gigaset: fix usb_gigaset write_cmd result race
authorTilman Schmidt <tilman@imap.cc>
Sat, 11 Oct 2014 11:46:30 +0000 (13:46 +0200)
committerDavid S. Miller <davem@davemloft.net>
Tue, 14 Oct 2014 19:05:35 +0000 (15:05 -0400)
commit86f8ef2c4802ac9dbe0c8c1c12670bd915a13013
treeea00760072953a797e6d42ef0ce252cd9556d937
parent340184b35ac8786bdb574d2c8ce8e4f1269ec4da
isdn/gigaset: fix usb_gigaset write_cmd result race

In usb_gigaset function gigaset_write_cmd(), the length field of
the command buffer structure could be cleared by the transmit
tasklet before it was used for the function's return value.
Fix by copying to a local variable before scheduling the tasklet.

Signed-off-by: Tilman Schmidt <tilman@imap.cc>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/isdn/gigaset/usb-gigaset.c