| commit | 8180bd47b043507568056f74f69b6a5abea26514 | [log] [tgz] |
|---|---|---|
| author | Mathy Vanhoef <vanhoefm@gmail.com> | Wed Nov 12 21:33:34 2014 -0500 |
| committer | John W. Linville <linville@tuxdriver.com> | Mon Nov 17 15:04:04 2014 -0500 |
| tree | e58236b802800f7013139d29ee17d534fc6180c4 | |
| parent | daad1660285a967b5da363e8de264e86b4a496a0 [diff] |
brcmfmac: kill URB when request timed out Kill the submitted URB in brcmf_usb_dl_cmd if the request timed out. This assures the URB is never submitted twice. It also prevents a possible use-after-free of the URB transfer buffer if a timeout occurs. Signed-off-by: Mathy Vanhoef <vanhoefm@gmail.com> Acked-by: Arend van Spriel <arend@broadcom.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>