]> git.baikalelectronics.ru Git - kernel.git/commit
USB: serial: iuu_phoenix: fix memory corruption
authorJohan Hovold <johan@kernel.org>
Wed, 15 Jul 2020 09:02:45 +0000 (11:02 +0200)
committerJohan Hovold <johan@kernel.org>
Thu, 16 Jul 2020 08:20:21 +0000 (10:20 +0200)
commitc5e5a920157f7ed021ddfb1530850db2eac676c2
tree12acbe9e68c39c3c42f05159a818c0c3bf994e52
parent0d542ba7f780256bfc95046b081b10ed570cf238
USB: serial: iuu_phoenix: fix memory corruption

The driver would happily overwrite its write buffer with user data in
256 byte increments due to a removed buffer-space sanity check.

Fixes: a69c3efacf7f ("tty: iuu_phoenix: fix locking.")
Cc: stable <stable@vger.kernel.org> # 2.6.31
Signed-off-by: Johan Hovold <johan@kernel.org>
drivers/usb/serial/iuu_phoenix.c