commit bd1ffc5af96540ee5a439549984b8b2e59482a66
author Hangyu Hua <hbh25y@gmail.com> Sat Jan 01 01:21:38 2022 +0800
committer Karsten Tausche <karsten@fairphone.com> Thu Jun 02 10:11:48 2022 +0200
tree 6e0250751aae5c2de64164e45af51ebea655d11e
parent 7c430a32f252597e46750ea000228b91c5ba9967

usb: gadget: clear related members when goto fail

commit 501e38a5531efbd77d5c73c0ba838a889bfc1d74 upstream.

dev->config and dev->hs_config and dev->dev need to be cleaned if
dev_config fails to avoid UAF.

Issue: FP3SEC-397
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Hangyu Hua <hbh25y@gmail.com>
Link: https://lore.kernel.org/r/20211231172138.7993-3-hbh25y@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit fdd64084e405544c5c11841ca9261785c988e2a1)
Change-Id: If3ad511be65ab812407c11aa9829ebc56c3963f0