usb: gadget: f_hid: use after free in hidg_alloc_inst()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 13 Nov 2014 06:19:47 +0000 (09:19 +0300)
committerFelipe Balbi <balbi@ti.com>
Tue, 18 Nov 2014 14:47:44 +0000 (08:47 -0600)
commit828f6148e89ec051c2540400773655c0174ccaa3
treebeb82dfe31dfc867320daabead8e6fd5f8247f80
parentefed421a94e62a7ddbc76acba4312b70e4be958f
usb: gadget: f_hid: use after free in hidg_alloc_inst()

We free "opts" on the error path and then dereference it.

Fixes: 21a9476a7ba8 ('usb: gadget: hid: add configfs support')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Felipe Balbi <balbi@ti.com>
drivers/usb/gadget/function/f_hid.c