Searched hist:aad0c65d6b37364d8ba92ecb8c85e004398a5194 (Results 1 – 1 of 1) sorted by relevance
| /freebsd/sys/dev/usb/ |
| H A D | usb_dev.c | diff aad0c65d6b37364d8ba92ecb8c85e004398a5194 Sun Oct 24 13:38:04 CEST 2021 Hans Petter Selasky <hselasky@FreeBSD.org> usb(4): Fix for use after free in combination with EVDEV_SUPPORT.
When EVDEV_SUPPORT was introduced, the USB transfers may be running
after the main FIFO is closed. In connection to this a race may appear
which can lead to use-after-free scenarios. Fix this for all FIFO
consumers by initializing and resetting the FIFO queues under the
lock used by the client. Then the client driver will see an empty
queue in all cases a race may appear.
Found by: pho@
MFC after: 1 week
Sponsored by: NVIDIA Networking
|