uas: Clear cmdinfo on command queue-ing
authorHans de Goede <hdegoede@redhat.com>
Thu, 14 Nov 2013 10:06:13 +0000 (11:06 +0100)
committerSarah Sharp <sarah.a.sharp@linux.intel.com>
Tue, 4 Mar 2014 23:38:24 +0000 (15:38 -0800)
commit3a4462e0e2fe8f715f54147d36b5433a7ff5a85a
tree13643efc4a15e11299dd0e83eca09511d85aced6
parent21fc05b680f6fba868b41e2713ade3fdea4049f9
uas: Clear cmdinfo on command queue-ing

The scsi error handling path re-uses previously queued up (and errored-out)
cmds. If such a re-used cmd had a data-phase then cmdinfo will have
data_in_urb / data_out_urb still set to the free-ed urbs from the errored-out
cmd, and they will get free-ed a second time when the error handling cmd
completes, corrupting the kernel heap.

Clearing cmdinfo on command queue-ing fixes this, and seems like a good idea
in general.

Signed-off-by: Hans de Goede <hdegoede@redhat.com>
Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
drivers/usb/storage/uas.c