From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f182.google.com (mail-pf1-f182.google.com [209.85.210.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 64A132DA759 for ; Mon, 17 Aug 2026 15:19:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.182 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786979978; cv=none; b=mXF0KkE4FksPG2Iv/ITjUWrlyuGJ9ZwxYcvZjOdXWyQVBiIMET1agd3ddEMUocsO2gjoxFxUcITGm9JerIzdrSx3YQT+B5RZAiCj+CKQDhDsv1/lBjXWnC4Z7CzidVG9JqEjrd2jP1Q3t8+4CICTdOc71aqXoTjJn8wQoS8V2rc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786979978; c=relaxed/simple; bh=OhND/qvWSkqE3s18woFDpmymL+MfxuThSmxLnhoyubc=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=T4xtxVCXH28Lax/TLaTzBY/TTqSE99hqf+FrQAStcySUia8xqJQWQJAFHYEp8GSZvy1+wZGEV+xruveTffNOhaZO8Xz0uORn+BP2Z5ZZ+IeFB6QrO7+BBeaZB8xYcvqMUxQbGq1aqEzZAEQvSVA+rQxtOqX4DbzH4mLA9JWrMSI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=dAtd9Ot3; arc=none smtp.client-ip=209.85.210.182 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="dAtd9Ot3" Received: by mail-pf1-f182.google.com with SMTP id d2e1a72fcca58-8518b3ff3e9so1841900b3a.2 for ; Mon, 17 Aug 2026 08:19:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786979971; x=1787584771; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=LKqm42/ODNCgkRQzNhF5koc+EyW84bXZD1789uSuy2Y=; b=dAtd9Ot3dGaPioW6GX5R1QbuQkxZ5khkt+nSgMh1Cq08NGuPtDBasEP6imugMM61yc xsswnU81cfc4UHvf67ZmZoTfBJFLb9cAdIAWOIqt/kRTk1Iz4MNtdqwLtVYJTy5LH1HA Jo0bIxhEi2iLRO1bXKr1/8T3uUWkfbuzwHL8xmh76Cr1LPlzH6oJCawWPN1Ei9KLbHy1 x6/ZRO9EpUQUs0C2Ri4YpJBd3e7SRwdMpY1He1zGg8j/J0iJhB3oulYd+J8NtY0cpdDR NPaRb8wh2Gm3G6QCqZd5vcBgxwxcYrETx6bI163wNcPSM4wExmIygqJ93F5KPBpTmwFL 6UyA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786979971; x=1787584771; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=LKqm42/ODNCgkRQzNhF5koc+EyW84bXZD1789uSuy2Y=; b=sK2Jqhip72arfvHtubHuKJLp/Crjr5BlJULwF9waCMIK2yt4Z0Aoe1vXD+ZQwQqI30 2ZT3bd545dBbtGilNmvMLFPCMOphtSga29jee/bpd8jM8lTyYmmP59LN9Bd7PQP6T1pr YpFgp9xaZr1lYC3Zxl2i5v4szJU5jgzXsTpPukfeQTj/nvVIBLNhJqER+LbvQF+C2lLz b7Xo+14uNzwcuHhmT7kCwiLSFmamukXV3YMgxCPChkA3r9hbpX2d7Dml8Pfujj6CkM43 4bjGsCpGGfA9/Ol3WO+1Zp+26Fqs4k8CmLsqmi8ZFP//O4NzT7HnLeiLm+MFhxGDBF+7 iM2A== X-Forwarded-Encrypted: i=1; AHgh+RqEemT+SLxSEhCmDPmrMYgqUvExFXgJhPZug5LRoyUpWsywOtqDtC2FEliORAO5N5Xgr5WyA7xLAt5b3og=@vger.kernel.org X-Gm-Message-State: AOJu0YzHFsJzFVd/EyQ5FbxVvfNjcKcqTyd/23qsDFLZPtrMu5i5K5BZ /W9MMsI1u4MMkoisnzDalySi2+fkMXHfocnfGic6QX58GiISOO39OJe7FXg1N1AbhpsS X-Gm-Gg: AR+sD12SnNDg8tPau+2PdUjgmJJzc3XnIk1hIiFmEBljz30wA2wCfRtJKZmmFBFOcFQ 0tLmV09bPZdZgRZKtDuUD6BXRV/bmwat9iDT1UwF8WDwWTWMWHiCnZ5jr5CFC69qlal4yMwLl4d MlbOb+ZQAWQD6UH6wBFcEWmkpofFfgjEZ+XoH6c7DI7k8DIkyjgjG/RhKXtSJOU0Q/Jm3BN71qq qGhFBeEOEjRagmrMwhGm/0NgPeCO5fBWjMwIQM/6gKsgiLm1ysnQs4OC91i+LOnlum8aKeC6Mue DlA1+HEkXraJr0M6dwfNPkZ9L/tC3SF17fjhc62GRtN62K5QjkyRn6UblBtgZahYLdJgCgCObpC N/3Y942FXx/JFc+XxRKQV8Lf2VRzUtLwUjgEq7ejXtIwyEtN14ZPa9+Sb0xGW1Xf0gvCKXlqOp4 Upz/08B2NaJaLTqvKI1o+YnxmU/QiVpNnQh9YtWLJ6m6GPpJASP/onDd108MxN8X5LexYhAKRAo x9JBl2XD6Y0Kt5jNBU1embWu2RHTcwOLURxk4/SAB270sPFhpnZEDmAjoROWEisqw== X-Received: by 2002:a05:6a00:23c1:b0:847:968d:b101 with SMTP id d2e1a72fcca58-851b88ce701mr1194606b3a.21.1786979970648; Mon, 17 Aug 2026 08:19:30 -0700 (PDT) Received: from codespaces-2db70c.m2fxbej512jepnsor2itp05j3d.ix.internal.cloudapp.net ([207.46.224.82]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-851b404a4d2sm770372b3a.16.2026.08.17.08.19.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 17 Aug 2026 08:19:30 -0700 (PDT) From: Triet Hoang To: Pawel Laszczak , Greg Kroah-Hartman Cc: linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org, Triet Hoang Subject: [PATCH] usb: cdns2: Handle ZLP request allocation failure Date: Mon, 17 Aug 2026 15:19:03 +0000 Message-ID: <20260817151903.188692-1-triet.hoang.dev@gmail.com> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Check the return value of cdns2_gadget_ep_alloc_request() before dereferencing the returned request. Signed-off-by: Triet Hoang --- drivers/usb/gadget/udc/cdns2/cdns2-gadget.c | 25 +++++++++++++++------ 1 file changed, 18 insertions(+), 7 deletions(-) diff --git a/drivers/usb/gadget/udc/cdns2/cdns2-gadget.c b/drivers/usb/gadget/udc/cdns2/cdns2-gadget.c index 308d3c468ab1..40c02159ff4d 100644 --- a/drivers/usb/gadget/udc/cdns2/cdns2-gadget.c +++ b/drivers/usb/gadget/udc/cdns2/cdns2-gadget.c @@ -1696,7 +1696,7 @@ static int cdns2_ep_enqueue(struct cdns2_endpoint *pep, static int cdns2_gadget_ep_queue(struct usb_ep *ep, struct usb_request *request, gfp_t gfp_flags) { - struct usb_request *zlp_request; + struct usb_request *zlp_request = NULL; struct cdns2_request *preq; struct cdns2_endpoint *pep; struct cdns2_device *pdev; @@ -1717,21 +1717,32 @@ static int cdns2_gadget_ep_queue(struct usb_ep *ep, struct usb_request *request, spin_lock_irqsave(&pdev->lock, flags); - preq = to_cdns2_request(request); - ret = cdns2_ep_enqueue(pep, preq, gfp_flags); - - if (ret == 0 && request->zero && request->length && + if (request->zero && request->length && (request->length % ep->maxpacket == 0)) { - struct cdns2_request *preq; - zlp_request = cdns2_gadget_ep_alloc_request(ep, GFP_ATOMIC); + if (!zlp_request) { + ret = -ENOMEM; + goto out; + } + zlp_request->buf = pdev->zlp_buf; zlp_request->length = 0; + } + preq = to_cdns2_request(request); + ret = cdns2_ep_enqueue(pep, preq, gfp_flags); + if (ret) + goto out; + + if (zlp_request) { preq = to_cdns2_request(zlp_request); ret = cdns2_ep_enqueue(pep, preq, gfp_flags); } +out: + if (ret && zlp_request) + cdns2_gadget_ep_free_request(ep, zlp_request); + spin_unlock_irqrestore(&pdev->lock, flags); return ret; } -- 2.53.0