dmaengine: usb-dmac: Fix dereferencing freed memory 'desc'
authorYoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
Fri, 3 Apr 2015 11:20:15 +0000 (20:20 +0900)
committerVinod Koul <vinod.koul@intel.com>
Fri, 17 Apr 2015 17:58:48 +0000 (23:28 +0530)
commitd7d8e892aa6fe280a2e2974d9fd1ec9253ee1a05
tree332e18f29948518da896e908c98d781b7b5b734d
parent28591dfdd96c6289aebbf12d8eb4e5dc5ddbde97
dmaengine: usb-dmac: Fix dereferencing freed memory 'desc'

This patch fixes an issue that the usb_dmac_desc_free() is
dereferencing freed memory 'desc' because it uses list_for_each_entry().
This function should use list_for_each_entry_safe().

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
Signed-off-by: Vinod Koul <vinod.koul@intel.com>
drivers/dma/sh/usb-dmac.c