Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

usb: misc: ezusb: update to use usb_control_msg_send()

The newer usb_control_msg_{send|recv}() API ensures that a short read is
treated as an error, data can be used off the stack, and raw usb pipes need
not be created in the calling functions.
For this reason, the instance of usb_control_msg() has been replaced with
usb_control_msg_send() appropriately.

Reviewed-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Anant Thazhemadam <anant.thazhemadam@gmail.com>
Link: https://lore.kernel.org/r/20210326223251.753952-3-anant.thazhemadam@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

authored by

Anant Thazhemadam and committed by
Greg Kroah-Hartman
ced6a0ba f5ffdd3b

+2 -14
+2 -14
drivers/usb/misc/ezusb.c
··· 31 31 static int ezusb_writememory(struct usb_device *dev, int address, 32 32 unsigned char *data, int length, __u8 request) 33 33 { 34 - int result; 35 - unsigned char *transfer_buffer; 36 - 37 34 if (!dev) 38 35 return -ENODEV; 39 36 40 - transfer_buffer = kmemdup(data, length, GFP_KERNEL); 41 - if (!transfer_buffer) { 42 - dev_err(&dev->dev, "%s - kmalloc(%d) failed.\n", 43 - __func__, length); 44 - return -ENOMEM; 45 - } 46 - result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), request, 37 + return usb_control_msg_send(dev, 0, request, 47 38 USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 48 - address, 0, transfer_buffer, length, 3000); 49 - 50 - kfree(transfer_buffer); 51 - return result; 39 + address, 0, data, length, 3000, GFP_KERNEL); 52 40 } 53 41 54 42 static int ezusb_set_reset(struct usb_device *dev, unsigned short cpucs_reg,