Thinh Nguyen b7c3d0b592 usb: dwc3: gadget: Fix looping of queued SG entries ...

commit b7fc65f514 upstream.

The dwc3_request->num_queued_sgs is decremented on completion. If a
partially completed request is handled, then the
dwc3_request->num_queued_sgs no longer reflects the total number of
num_queued_sgs (it would be cleared).

Correctly check the number of request SG entries remained to be prepare
and queued. Failure to do this may cause null pointer dereference when
accessing non-existent SG entry.

Cc: stable@vger.kernel.org
Fixes: c96e6725db ("usb: dwc3: gadget: Correct the logic for queuing sgs")
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/d07a7c4aa0fcf746cdca0515150dbe5c52000af7.1731545781.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-12-05 13:54:25 +01:00

..

atm

usb: atm: cxacru: fix endpoint checking in cxacru_bind()

2024-06-20 19:34:51 +02:00

c67x00

USB: c67x00: Remove unused declaration c67x00_hcd_msg_received()

2023-10-02 16:42:33 +02:00

cdns3

usb: cdnsp: Fix incorrect usb_request status

2024-10-04 16:38:41 +02:00

chipidea

usb: chipidea: udc: enable suspend interrupt after usb reset

2024-10-17 15:26:39 +02:00

class

USB: class: CDC-ACM: fix race between get_serial and set_serial

2024-10-04 16:38:40 +02:00

common

Merge tag 'driver-core-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2024-07-25 10:42:22 -07:00

core

usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()

2024-08-22 17:29:50 +08:00

dwc2

usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario

2024-10-17 15:26:39 +02:00

dwc3

usb: dwc3: gadget: Fix looping of queued SG entries

2024-12-05 13:54:25 +01:00

early

…

fotg210

usb: fotg210: Add missing kernel doc description

2024-05-11 08:42:03 +01:00

gadget

Revert "usb: gadget: composite: fix OS descriptors w_value logic"

2024-12-05 13:54:15 +01:00

host

usb: xhci: Avoid queuing redundant Stop Endpoint commands

2024-12-05 13:54:14 +01:00

image

scsi: core: Add a dma_alignment field to the host and host template

2024-04-11 21:37:48 -04:00

isp1760

mm, slab: remove last vestiges of SLAB_MEM_SPREAD

2024-03-12 20:32:19 -07:00

misc

usb: misc: ljca: move usb_autopm_put_interface() after wait for response

2024-12-05 13:54:24 +01:00

mon

usb: add missing MODULE_DESCRIPTION() macros

2024-06-20 19:18:52 +02:00

mtu3

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

musb

usb: musb: Fix hardware lockup on first Rx endpoint request

2024-12-05 13:54:25 +01:00

phy

usb: phy: Fix API devm_usb_put_phy() can not release the phy

2024-11-08 16:30:53 +01:00

renesas_usbhs

usb: renesas_usbhs: Remove renesas_usbhs_get_info() wrapper

2024-04-18 16:47:49 +02:00

roles

Merge v6.8-rc6 into usb-next

2024-02-26 06:53:50 +01:00

serial

USB: serial: option: add Quectel RG650V

2024-11-14 13:21:13 +01:00

storage

usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip

2024-10-17 15:26:55 +02:00

typec

usb: typec: ucsi: glink: fix off-by-one in connector_status

2024-12-05 13:54:07 +01:00

usbip

usb: vhci-hcd: Do not drop references before new references are gained

2024-07-31 10:39:04 +02:00

Kconfig

usb: pci-quirks: handle HAS_IOPORT dependency for AMD quirk

2023-10-02 16:19:12 +02:00

Makefile

USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected

2024-06-04 15:33:38 +02:00

usb-skeleton.c

…