Searched hist:"02582 b92f60fa33b68b90263013e98550286db0a" (Results 1 – 1 of 1) sorted by relevance
/openbmc/linux/drivers/usb/musb/ |
H A D | musb_core.c | diff 02582b92f60fa33b68b90263013e98550286db0a Mon Sep 15 05:09:31 CDT 2008 Kevin Hilman <khilman@deeprootsystems.com> MUSB: Add sanity check for maximum number of endpoints
There is no check if platform code passes in more endpoints (num_eps) than the maximum number of enpoints (MUSB_C_NUM_EPS.) The result is that allocate_instance() happily writes past the end of 'struct musb' corrupting memory.
This patch adds a BUG() if the platform code requests more than the max.
Signed-off-by: Kevin Hilman <khilman@deeprootsystems.com> Acked-by: Felipe Balbi <felipe.balbi@nokia.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
|