Takashi Iwai 07b01b0d8a ALSA: usb: ua101: Avoid embedded URBs ... UA101 driver uses URBs embedded in struct ua101, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, this may lead to a UAF when the URB is released asynchronously. For addressing the problem, this patch converts the embedded URBs to ones that are properly allocated via usb_alloc_urb(). The iso_frame_desc[] is gone, as it's allocated together by usb_alloc_urb(). Along with the dynamic allocation of each URB, the ua101.urbs[] becomes a static array of struct ua101_urb, and struct ua101_urb contains the pointer to struct ua101. Those are needed to handle the ready_list linked list in the complete callback. No functional changes, only compile-tested. Link: https://lore.kernel.org/20260903130757.0668310a.michal.pecio@gmail.com Signed-off-by: Takashi Iwai <tiwai@suse.de> Link: https://patch.msgid.link/20260903160458.1938392-2-tiwai@suse.de		2026-09-06 10:01:42 +02:00
..
Makefile	ALSA: usb: Use *-y instead of *-objs in Makefile	2024-05-08 18:17:53 +02:00
ua101.c	ALSA: usb: ua101: Avoid embedded URBs	2026-09-06 10:01:42 +02:00