tree ab50909177228c8d34929afcb73e6a1a3c45d2ec
parent 0985d3a410ace005ce62666b67c9372dfc14bd7f
author Raveendran Somu <raveendran.somu@cypress.com> 1585124424 -0500
committer Kalle Valo <kvalo@codeaurora.org> 1585215825 +0200

brcmfmac: Fix driver crash on USB control transfer timeout

When the control transfer gets timed out, the error status
was returned without killing that urb, this leads to using
the same urb. This issue causes the kernel crash as the same
urb is sumbitted multiple times. The fix is to kill the
urb for timeout transfer before returning error

Signed-off-by: Raveendran Somu <raveendran.somu@cypress.com>
Signed-off-by: Chi-hsien Lin <chi-hsien.lin@cypress.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/1585124429-97371-2-git-send-email-chi-hsien.lin@cypress.com