| commit | 9191eee7b8a0e18c07c06d6da502706805cab6d2 | [log] [tgz] |
|---|---|---|
| author | Sarah Sharp <sarah.a.sharp@linux.intel.com> | Thu Aug 27 14:36:14 2009 -0700 |
| committer | Greg Kroah-Hartman <gregkh@suse.de> | Wed Sep 23 06:46:18 2009 -0700 |
| tree | a182a6397331ef8ccbeb1d549f5f3e638d256fff | |
| parent | 83fbcdcca03013bb5af130d6d91eba11e3d3269e [diff] |
USB: xhci: Don't touch xhci_td after it's freed. On a successful transfer, urb->td is freed before the URB is ready to be given back to the driver. Don't touch urb->td after it's freed. This bug would have only shown up when xHCI debugging was turned on, and the freed memory was quickly reused for something else. Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>