Commit a9556040 authored by Johan Hovold's avatar Johan Hovold Committed by Greg Kroah-Hartman

USB: cyberjack: fix port-data memory leak

Fix port-data memory leak by replacing attach and release with
port_probe and port_remove.

Since commit 0998d063 (device-core: Ensure drvdata = NULL when no
driver is bound) the port private data is no longer freed at release as
it is no longer accessible.

Note that the write waitqueue was initialised but never used.

Compile-only tested.

Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarJohan Hovold <jhovold@gmail.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 7bdce718
...@@ -55,9 +55,9 @@ ...@@ -55,9 +55,9 @@
#define CYBERJACK_PRODUCT_ID 0x0100 #define CYBERJACK_PRODUCT_ID 0x0100
/* Function prototypes */ /* Function prototypes */
static int cyberjack_startup(struct usb_serial *serial);
static void cyberjack_disconnect(struct usb_serial *serial); static void cyberjack_disconnect(struct usb_serial *serial);
static void cyberjack_release(struct usb_serial *serial); static int cyberjack_port_probe(struct usb_serial_port *port);
static int cyberjack_port_remove(struct usb_serial_port *port);
static int cyberjack_open(struct tty_struct *tty, static int cyberjack_open(struct tty_struct *tty,
struct usb_serial_port *port); struct usb_serial_port *port);
static void cyberjack_close(struct usb_serial_port *port); static void cyberjack_close(struct usb_serial_port *port);
...@@ -83,9 +83,9 @@ static struct usb_serial_driver cyberjack_device = { ...@@ -83,9 +83,9 @@ static struct usb_serial_driver cyberjack_device = {
.description = "Reiner SCT Cyberjack USB card reader", .description = "Reiner SCT Cyberjack USB card reader",
.id_table = id_table, .id_table = id_table,
.num_ports = 1, .num_ports = 1,
.attach = cyberjack_startup,
.disconnect = cyberjack_disconnect, .disconnect = cyberjack_disconnect,
.release = cyberjack_release, .port_probe = cyberjack_port_probe,
.port_remove = cyberjack_port_remove,
.open = cyberjack_open, .open = cyberjack_open,
.close = cyberjack_close, .close = cyberjack_close,
.write = cyberjack_write, .write = cyberjack_write,
...@@ -107,56 +107,45 @@ struct cyberjack_private { ...@@ -107,56 +107,45 @@ struct cyberjack_private {
short wrsent; /* Data already sent */ short wrsent; /* Data already sent */
}; };
/* do some startup allocations not currently performed by usb_serial_probe() */ static int cyberjack_port_probe(struct usb_serial_port *port)
static int cyberjack_startup(struct usb_serial *serial)
{ {
struct cyberjack_private *priv; struct cyberjack_private *priv;
int i; int result;
/* allocate the private data structure */
priv = kmalloc(sizeof(struct cyberjack_private), GFP_KERNEL); priv = kmalloc(sizeof(struct cyberjack_private), GFP_KERNEL);
if (!priv) if (!priv)
return -ENOMEM; return -ENOMEM;
/* set initial values */
spin_lock_init(&priv->lock); spin_lock_init(&priv->lock);
priv->rdtodo = 0; priv->rdtodo = 0;
priv->wrfilled = 0; priv->wrfilled = 0;
priv->wrsent = 0; priv->wrsent = 0;
usb_set_serial_port_data(serial->port[0], priv);
init_waitqueue_head(&serial->port[0]->write_wait); usb_set_serial_port_data(port, priv);
for (i = 0; i < serial->num_ports; ++i) { result = usb_submit_urb(port->interrupt_in_urb, GFP_KERNEL);
int result;
result = usb_submit_urb(serial->port[i]->interrupt_in_urb,
GFP_KERNEL);
if (result) if (result)
dev_err(&serial->dev->dev, dev_err(&port->dev, "usb_submit_urb(read int) failed\n");
"usb_submit_urb(read int) failed\n");
dev_dbg(&serial->dev->dev, "%s - usb_submit_urb(int urb)\n",
__func__);
}
return 0; return 0;
} }
static void cyberjack_disconnect(struct usb_serial *serial) static int cyberjack_port_remove(struct usb_serial_port *port)
{ {
int i; struct cyberjack_private *priv;
for (i = 0; i < serial->num_ports; ++i) priv = usb_get_serial_port_data(port);
usb_kill_urb(serial->port[i]->interrupt_in_urb); kfree(priv);
return 0;
} }
static void cyberjack_release(struct usb_serial *serial) static void cyberjack_disconnect(struct usb_serial *serial)
{ {
int i; int i;
for (i = 0; i < serial->num_ports; ++i) { for (i = 0; i < serial->num_ports; ++i)
/* My special items, the standard routines free my urbs */ usb_kill_urb(serial->port[i]->interrupt_in_urb);
kfree(usb_get_serial_port_data(serial->port[i]));
}
} }
static int cyberjack_open(struct tty_struct *tty, static int cyberjack_open(struct tty_struct *tty,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment