]> git.baikalelectronics.ru Git - kernel.git/commit
USB: serial: iuu_phoenix: fix memory corruption
authorJohan Hovold <johan@kernel.org>
Wed, 15 Jul 2020 09:02:45 +0000 (11:02 +0200)
committerJohan Hovold <johan@kernel.org>
Thu, 16 Jul 2020 08:20:21 +0000 (10:20 +0200)
commit6581a9426b61d88d3c14f3cb7678347b8793e8b3
tree12acbe9e68c39c3c42f05159a818c0c3bf994e52
parent539c02dc2ac4beba661ff5e28225d7ca9bcf4b33
USB: serial: iuu_phoenix: fix memory corruption

The driver would happily overwrite its write buffer with user data in
256 byte increments due to a removed buffer-space sanity check.

Fixes: a69c3efacf7f ("tty: iuu_phoenix: fix locking.")
Cc: stable <stable@vger.kernel.org> # 2.6.31
Signed-off-by: Johan Hovold <johan@kernel.org>
drivers/usb/serial/iuu_phoenix.c