usb: gadget: clear related members when goto fail
authorHangyu Hua <hbh25y@gmail.com>
Fri, 31 Dec 2021 17:21:38 +0000 (01:21 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 8 Mar 2022 18:01:56 +0000 (19:01 +0100)
commit70959fa1a003cb7c6ed2fd0e0f887125d08b8bf6
treea251b1a7536db5ec748715d4d8ec6b3feb3c9358
parent6936d1097e9cb891e1daaa8aab1b9c080f5e59a2
usb: gadget: clear related members when goto fail

commit 501e38a5531efbd77d5c73c0ba838a889bfc1d74 upstream.

dev->config and dev->hs_config and dev->dev need to be cleaned if
dev_config fails to avoid UAF.

Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Hangyu Hua <hbh25y@gmail.com>
Link: https://lore.kernel.org/r/20211231172138.7993-3-hbh25y@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/gadget/legacy/inode.c