From ef4087bf2b20dfa44c7e33c1544d29cfdcd656e7 Mon Sep 17 00:00:00 2001
From: Badhri Jagan Sridharan <badhri@google.com>
Date: Wed, 6 Aug 2014 12:34:30 -0700
Subject: [PATCH] libusbhost: Fix IOCTL call during usb_request_cancel

USBDEVFS_DISCARDURB IOCTL call expects a pointer to the
the urb structure to be passed from userspace. LibusbHost
instead sends usbdevfs_urb**. Change this to usbdevfs_urb*.

Fixes Issue: https://code.google.com/p/android/issues/detail?id=74530

Change-Id: Ifb8a13857e1a9f62536f2a07c0965e9c419b7d4c
---
 libusbhost/usbhost.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libusbhost/usbhost.c b/libusbhost/usbhost.c
index cd8000a39..a3222cf7a 100644
--- a/libusbhost/usbhost.c
+++ b/libusbhost/usbhost.c
@@ -690,6 +690,6 @@ struct usb_request *usb_request_wait(struct usb_device *dev)
 int usb_request_cancel(struct usb_request *req)
 {
     struct usbdevfs_urb *urb = ((struct usbdevfs_urb*)req->private_data);
-    return ioctl(req->dev->fd, USBDEVFS_DISCARDURB, &urb);
+    return ioctl(req->dev->fd, USBDEVFS_DISCARDURB, urb);
 }