Alexey Khoroshilov a31267c308 rtl8187: fix use after free on failure path in rtl8187_probe() ... If allocation of io_dmabuf fails, rtl8187_probe() calls usb_put_dev(udev) while usb_get_dev(udev) is not called yet. As a result refcnt is decremented incorrectly and usb_dev can be used after memory deallocation. Found by Linux Driver Verification project (linuxtesting.org). Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru> Acked-by: Larry Finger <Larry.Finger@lwfinger.net> Signed-off-by: John W. Linville <linville@tuxdriver.com>		2014-03-31 13:47:41 -04:00
..
rtl8180	rtl8180: enable rtl8187se support	2014-03-27 14:20:09 -04:00
rtl8187	rtl8187: fix use after free on failure path in rtl8187_probe()	2014-03-31 13:47:41 -04:00
Kconfig	rtl818x: Update Kconfig for rtl8187se	2014-03-27 14:20:10 -04:00
Makefile	rtl818x: move rtl8180 and rtl8187 to separate subdirectories	2010-12-22 13:45:32 -05:00
rtl818x.h	rtl8180: don't use weird trick to access "far" registers	2014-03-31 13:47:41 -04:00