Mirrors_Framework/nuttx
1
0
Fork 0
mirror of https://github.com/apache/nuttx.git synced 2026-06-03 22:20:31 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

usbdev:fix usbdev usbdev_fs_classuninitialize double free

Browse Source 
Signed-off-by: anjiahao <anjiahao@xiaomi.com>
This commit is contained in:
anjiahao
2024-04-01 17:42:05 +08:00
committed by Xiang Xiao
parent a8d7103a2b
commit ff4c6c33e8
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
drivers/usbdev/usbdev_fs.c
+3 -1
View File
@@ -83,6 +83,7 @@ struct usbdev_fs_dev_s
uint8_t config; uint8_t config;
struct usbdev_devinfo_s devinfo; struct usbdev_devinfo_s devinfo;
FAR struct usbdev_fs_ep_s *eps; FAR struct usbdev_fs_ep_s *eps;
bool uninitialized;
}; };
struct usbdev_fs_driver_s struct usbdev_fs_driver_s
@@ -528,7 +529,7 @@ static int usbdev_fs_close(FAR struct file *filep)
} }
} }
if (do_free) if (do_free && fs->uninitialized)
{ {
FAR struct usbdev_fs_driver_s *alloc = container_of( FAR struct usbdev_fs_driver_s *alloc = container_of(
fs, FAR struct usbdev_fs_driver_s, dev); fs, FAR struct usbdev_fs_driver_s, dev);
@@ -1409,6 +1410,7 @@ void usbdev_fs_classuninitialize(FAR struct usbdevclass_driver_s *classdev)
FAR struct usbdev_fs_dev_s *fs = &alloc->dev; FAR struct usbdev_fs_dev_s *fs = &alloc->dev;
int i; int i;
fs->uninitialized = true;
for (i = 0; i < fs->devinfo.nendpoints; i++) for (i = 0; i < fs->devinfo.nendpoints; i++)
{ {
if (fs->eps != NULL && fs->eps[i].crefs > 0) if (fs->eps != NULL && fs->eps[i].crefs > 0)