Skip to content
  • Hemant Kumar's avatar
    net: usb: Fix memory leak on Tx data path · 39707c2a
    Hemant Kumar authored
    
    
    Driver anchors the tx urbs and defers the urb submission if
    a transmit request comes when the interface is suspended.
    Anchoring urb increments the urb reference count. These
    deferred urbs are later accessed by calling usb_get_from_anchor()
    for submission during interface resume. usb_get_from_anchor()
    unanchors the urb but urb reference count remains same.
    This causes the urb reference count to remain non-zero
    after usb_free_urb() gets called and urb never gets freed.
    Hence call usb_put_urb() after anchoring the urb to properly
    balance the reference count for these deferred urbs. Also,
    unanchor these deferred urbs during disconnect, to free them
    up.
    
    Signed-off-by: default avatarHemant Kumar <hemantk@codeaurora.org>
    Acked-by: default avatarOliver Neukum <oneukum@suse.de>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    39707c2a