mdm6600: Fix possible use after free
authorBenoit Goby <benoit@android.com>
Fri, 4 Mar 2011 22:01:56 +0000 (14:01 -0800)
committerBenoit Goby <benoit@android.com>
Fri, 4 Mar 2011 23:06:11 +0000 (15:06 -0800)
commitd1d818cf4cfd82466398848d695fc262636f6494
tree9dbef7e46697bde36ea7ade6fc75482ac98c3b16
parent14a13cbc5eada41e467c744aa274495f06a213d7
mdm6600: Fix possible use after free

If a disconnect happens while the ril runs a tiocmset ioctl, the usb
interface will get freed. Then before returning, autopm_put_interface
will access the interface struct after it has been freed. Get an
interface reference to prevent it from being freed before the tty
has been released.

Change-Id: Ia009995c3fcdfa2e590b36e0c413433ea5f97b59
Signed-off-by: Benoit Goby <benoit@android.com>
drivers/usb/serial/mdm6600.c