linux/drivers/usb/misc, branch v2.6.24

USB: FIx locks and urb->status in adutux (updated)

2007-11-28T21:58:34Z

Two main issues fixed here are: - An improper use of in-struct lock to protect an open count - Use of urb status for -EINPROGRESS Also, along the way: - Change usb_unlink_urb to usb_kill_urb. Apparently there's no need to use usb_unlink_urb whatsoever in this driver, and the old use of usb_kill_urb was outright racy (it unlinked and immediately freed). - Fix indentation in adu_write. Looks like it was damaged by a script. - Vitaly wants -EBUSY on multiply opens. - bInterval was taken from a wrong endpoint. Signed-off-by: Pete Zaitcev Signed-off-by: Vitaliy Ivanov Tested-by: Vitaliy Ivanov Signed-off-by: Greg Kroah-Hartman

USB: fix usbled disconnect read race #2

2007-11-28T21:58:33Z

usbled has a race where show methods for attributes in sysfs can follow a NULL pointer during disconnect. The correct ordering fixes it. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: open disconnect race in usblcd

2007-10-25T19:18:46Z

this driver has a possible use after free due to a race when disconnect and open handle intfdata without a lock. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: disconnect open race in legousbtower

2007-10-25T19:18:46Z

again, possible use after free due to touching intfdata without lock. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: open disconnect race in iowarrior

2007-10-25T19:18:46Z

the driver sets intfdata to NULL without lock. Data structures can be freed and accessed. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: missing error check in emi62

2007-10-25T19:18:45Z

the emi62 also lacks an error check. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: missing error check in emi26

2007-10-25T19:18:45Z

this drivers lacks an error check. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: fix read vs. disconnect race in cytherm driver

2007-10-25T19:18:44Z

the disconnect method of this driver set intfdata to NULL before removing attribute files. The attributes' read methods will happily follow the NULL pointer. Here's the correct ordering. Signed-off-by : Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB: fix locking in idmouse

2007-10-25T19:18:44Z

Pete caused me to lock at buggy drivers in this respect. The idmouse has a race between open and disconnect. This patch - solves the open/disconnect race - switches locking to mutexes Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

USB rio500.c: fix check-after-use

2007-10-25T19:18:43Z

The Coverity checker spotted that we have already oops'ed if "dev" was NULL in these places. Since "dev" being NULL isn't possible at these places this patch removes the NULL checks. Additionally, I've fixed the formatting of the if's. Signed-off-by: Adrian Bunk Acked-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman