From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Subject: usb: dwc3: of-simple: fix use-after-free on remove
From: Alan Stern <stern@rowland.harvard.edu>
Message-Id: <Pine.LNX.4.44L0.1806211038090.2381-100000@iolanthe.rowland.org>
Date: Thu, 21 Jun 2018 11:15:11 -0400 (EDT)
To: Roger Quadros <rogerq@ti.com>
Cc: "Rafael J. Wysocki" <rafael@kernel.org>, Johan Hovold <johan@kernel.org>, "Rafael J. Wysocki" <rjw@rjwysocki.net>, Tony Lindgren <tony@atomide.com>, Felipe Balbi <balbi@kernel.org>, Tero Kristo <t-kristo@ti.com>, Greg Kroah-Hartman <gregkh@linuxfoundation.org>, "open list:ULTRA-WIDEBAND \(UWB\) SUBSYSTEM:" <linux-usb@vger.kernel.org>, "Nori, Sekhar" <nsekhar@ti.com>, Grygorii Strashko <grygorii.strashko@ti.com>, Nishanth Menon <nm@ti.com>, Linux PM <linux-pm@vger.kernel.org>
List-ID: <linux-usb.vger.kernel.org>
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