tree b90e845add297bf5a71c19d7511407f92f3e7090
parent 6db37e7f0de76b0a420a5f632421c70531b88364
author Hangyu Hua <hbh25y@gmail.com> 1640971298 +0800
committer Maarten Derks <maarten@fairphone.com> 1652962679 +0200

UPSTREAM: usb: gadget: clear related members when goto fail

commit 501e38a5531efbd77d5c73c0ba838a889bfc1d74 upstream.

dev->config and dev->hs_config and dev->dev need to be cleaned if
dev_config fails to avoid UAF.

Issue: SEC-3421
Bug: 220261709
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Hangyu Hua <hbh25y@gmail.com>
Link: https://lore.kernel.org/r/20211231172138.7993-3-hbh25y@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Change-Id: I149a16bc8db7262c3ab9c2f72a0f10c6caebee83
(cherry picked from commit 590a98d5d108653cb4ebdf61ec73b2d31a1f7b81)