summaryrefslogtreecommitdiffstats
path: root/drivers/usb/serial/option.c
diff options
context:
space:
mode:
authorJohan Hovold2013-02-13 17:53:28 +0100
committerGreg Kroah-Hartman2013-02-13 18:20:06 +0100
commitb2ca699076573c94fee9a73cb0d8645383b602a0 (patch)
treeb9579ce8ed1511a5b3a234b03392b3c095de9231 /drivers/usb/serial/option.c
parentUSB: option: add Yota / Megafon M100-1 4g modem (diff)
downloadkernel-qcow2-linux-b2ca699076573c94fee9a73cb0d8645383b602a0.tar.gz
kernel-qcow2-linux-b2ca699076573c94fee9a73cb0d8645383b602a0.tar.xz
kernel-qcow2-linux-b2ca699076573c94fee9a73cb0d8645383b602a0.zip
USB: serial: fix null-pointer dereferences on disconnect
Make sure serial-driver dtr_rts is called with disc_mutex held after checking the disconnected flag. Due to a bug in the tty layer, dtr_rts may get called after a device has been disconnected and the tty-device unregistered. Some drivers have had individual checks for disconnect to make sure the disconnected interface was not accessed, but this should really be handled in usb-serial core (at least until the long-standing tty-bug has been fixed). Note that the problem has been made more acute with commit 0998d0631001 ("device-core: Ensure drvdata = NULL when no driver is bound") as the port data is now also NULL when dtr_rts is called resulting in further oopses. Reported-by: Chris Ruehl <chris.ruehl@gtsys.com.hk> Cc: stable <stable@vger.kernel.org> Signed-off-by: Johan Hovold <jhovold@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/serial/option.c')
0 files changed, 0 insertions, 0 deletions