This is a note to let you know that I've just added the patch titled USB: spcp8x5: fix device initialisation at open to the 3.4-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: usb-spcp8x5-fix-device-initialisation-at-open.patch and it can be found in the queue-3.4 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 9e5adb3632ba5664767ff5f41d3f584d9de102b8 Mon Sep 17 00:00:00 2001 From: Johan Hovold <jhovold@xxxxxxxxx> Date: Mon, 10 Jun 2013 18:29:39 +0200 Subject: USB: spcp8x5: fix device initialisation at open From: Johan Hovold <jhovold@xxxxxxxxx> commit 5e4211f1c47560c36a8b3d4544dfd866dcf7ccd0 upstream. Do not use uninitialised termios data to determine when to configure the device at open. Signed-off-by: Johan Hovold <jhovold@xxxxxxxxx> [bwh: Backported to 3.2: tty_struct::termios is a pointer, not a struct] Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx> Cc: Yang Yingliang <yangyingliang@xxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/usb/serial/spcp8x5.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) --- a/drivers/usb/serial/spcp8x5.c +++ b/drivers/usb/serial/spcp8x5.c @@ -337,7 +337,6 @@ static void spcp8x5_set_termios(struct t struct spcp8x5_private *priv = usb_get_serial_port_data(port); unsigned long flags; unsigned int cflag = tty->termios->c_cflag; - unsigned int old_cflag = old_termios->c_cflag; unsigned short uartdata; unsigned char buf[2] = {0, 0}; int baud; @@ -346,15 +345,15 @@ static void spcp8x5_set_termios(struct t /* check that they really want us to change something */ - if (!tty_termios_hw_change(tty->termios, old_termios)) + if (old_termios && !tty_termios_hw_change(tty->termios, old_termios)) return; /* set DTR/RTS active */ spin_lock_irqsave(&priv->lock, flags); control = priv->line_control; - if ((old_cflag & CBAUD) == B0) { + if (old_termios && (old_termios->c_cflag & CBAUD) == B0) { priv->line_control |= MCR_DTR; - if (!(old_cflag & CRTSCTS)) + if (!(old_termios->c_cflag & CRTSCTS)) priv->line_control |= MCR_RTS; } if (control != priv->line_control) { @@ -442,7 +441,6 @@ static void spcp8x5_set_termios(struct t * status of the device. */ static int spcp8x5_open(struct tty_struct *tty, struct usb_serial_port *port) { - struct ktermios tmp_termios; struct usb_serial *serial = port->serial; struct spcp8x5_private *priv = usb_get_serial_port_data(port); int ret; @@ -465,7 +463,7 @@ static int spcp8x5_open(struct tty_struc /* Setup termios */ if (tty) - spcp8x5_set_termios(tty, port, &tmp_termios); + spcp8x5_set_termios(tty, port, NULL); spcp8x5_get_msr(serial->dev, &status, priv->type); Patches currently in stable-queue which might be from jhovold@xxxxxxxxx are queue-3.4/usb-mos7840-fix-memory-leak-in-open.patch queue-3.4/usb-oti6858-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-io_ti-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-pl2303-fix-device-initialisation-at-open.patch queue-3.4/usb-ch341-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-io_edgeport-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-ftdi_sio-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-ark3116-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-pl2303-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-cypress_m8-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-ssu100-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-keyspan-fix-null-deref-at-disconnect-and-release.patch queue-3.4/usb-mct_u232-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-spcp8x5-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-adutux-fix-big-endian-device-type-reporting.patch queue-3.4/usb-ti_usb_3410_5052-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-spcp8x5-fix-device-initialisation-at-open.patch queue-3.4/usb-mos7840-fix-race-in-register-handling.patch queue-3.4/usb-ftdi_sio-fixed-handling-of-unsupported-csize-setting.patch queue-3.4/usb-mos7840-fix-broken-tiocmiwait.patch queue-3.4/usb-serial-fix-hang-when-opening-port.patch queue-3.4/usb-mos7840-fix-use-after-free-in-tiocmiwait.patch queue-3.4/usb-ti_usb_3410_5052-fix-big-endian-firmware-handling.patch queue-3.4/usb-serial-add-modem-status-change-wait-queue.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html