Re: [PATCH stable v4.4+] usb: gadget: serial: fix oops when data rx'd after close

From: Greg Kroah-Hartman
Date: Thu Oct 18 2018 - 11:18:01 EST


On Thu, Oct 18, 2018 at 04:28:20PM +0200, Krzysztof Kozlowski wrote:
> From: Stephen Warren <swarren@xxxxxxxxxx>
>
> commit daa35bd95634a2a2d72d1049c93576a02711cb1a upstream
>
> When the gadget serial device has no associated TTY, do not pass any
> received data into the TTY layer for processing; simply drop it instead.
> This prevents the TTY layer from calling back into the gadget serial
> driver, which will then crash in e.g. gs_write_room() due to lack of
> gadget serial device to TTY association (i.e. a NULL pointer dereference).
>
> Signed-off-by: Stephen Warren <swarren@xxxxxxxxxx>
> Signed-off-by: Felipe Balbi <felipe.balbi@xxxxxxxxxxxxxxx>
> Signed-off-by: Krzysztof Kozlowski <krzk@xxxxxxxxxx>

Now queued up, thanks.

greg k-h