]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ttusb2: limit messages to buffer size
authorAlyssa Milburn <amilburn@zall.org>
Sat, 1 Apr 2017 17:34:32 +0000 (14:34 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 May 2017 13:46:19 +0000 (15:46 +0200)
commit8d730619ae01ebb8049f3ab292e262048ab0f3ca
treec4b8207e5050621edc968268a36ff61f85042361
parentf2b30b2f19a9cc013fbb04144cea3896df2eabb1
ttusb2: limit messages to buffer size

commit a12b8ab8c5ff7ccd7b107a564743507c850a441d upstream.

Otherwise ttusb2_i2c_xfer can read or write beyond the end of static and
heap buffers.

Signed-off-by: Alyssa Milburn <amilburn@zall.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/usb/dvb-usb/ttusb2.c