On 5/7/26 10:45 AM, Mattijs Korpershoek wrote:
Hi Balaji,
Thank you for the patch.
On Thu, May 07, 2026 at 10:06, Balaji Selvanathan
<[email protected]> wrote:
The dwc3_free_one_event_buffer() function incorrectly called free()
on event buffer structures allocated with devm_kzalloc(). This
caused heap corruption and a synchronous abort when exiting
fastboot mode via "fastboot continue".
Device-managed memory is automatically freed when the device is
removed, so manual deallocation causes the heap allocator to access
corrupted metadata.
Fixes: 884b10e86a05 ("usb: dwc3: core: fix memory leaks in event buffer
cleanup")
Signed-off-by: Balaji Selvanathan <[email protected]>
Reviewed-by: Mattijs Korpershoek <[email protected]>
Marek, I'm assuming you will pick this up.
If you want me to take it instead, let me know.
I'll pick up V3 once the nitpick is addressed.
