On 5/7/2026 10:55 PM, Marek Vasut wrote:
On 5/7/26 5:20 PM, Balaji Selvanathan wrote:
The dwc3_free_one_event_buffer() function incorrectly called free()
on event buffer structures allocated with devm_kzalloc(). This
caused heap corruption and a synchronous abort when exiting
fastboot mode via "fastboot continue".
Device-managed memory is automatically freed when the device is
removed, so manual deallocation causes the heap allocator to access
corrupted metadata.
Fixes: 884b10e86a05 ("usb: dwc3: core: fix memory leaks in event
buffer cleanup")
Signed-off-by: Balaji Selvanathan <[email protected]>
Reviewed-by: Marek Vasut <[email protected]>
Did Mattijs RB got dropped ?
Hi,
Thought Mattijs will give reviewed-by after placing "Fixes:" tag in
commit footer.
Thanks
