Commit 92811e27 authored by Stephen Warren's avatar Stephen Warren Committed by Greg Kroah-Hartman

usb: gadget: serial: fix oops when data rx'd after close

commit daa35bd9 upstream.

When the gadget serial device has no associated TTY, do not pass any
received data into the TTY layer for processing; simply drop it instead.
This prevents the TTY layer from calling back into the gadget serial
driver, which will then crash in e.g. gs_write_room() due to lack of
gadget serial device to TTY association (i.e. a NULL pointer dereference).
Signed-off-by: Stephen Warren's avatarStephen Warren <>
Signed-off-by: default avatarFelipe Balbi <>
Signed-off-by: default avatarKrzysztof Kozlowski <>
Signed-off-by: default avatarGreg Kroah-Hartman <>
parent f01e8fee
......@@ -537,7 +537,7 @@ static void gs_rx_push(unsigned long _port)
/* push data to (open) tty */
if (req->actual) {
if (req->actual && tty) {
char *packet = req->buf;
unsigned size = req->actual;
unsigned n;
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment