| commit | 9290e81b98bec0ff1126d9f9e2448dd35d6eb25f | [log] [tgz] |
|---|---|---|
| author | Johan Hovold <johan@kernel.org> | Wed Jul 15 11:02:45 2020 +0200 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Wed Jul 22 09:32:09 2020 +0200 |
| tree | 680d5bc99df22d781b3e7b68500db7d01dbac0f9 | |
| parent | b6104a85d1c6f83a832e71b81a7e345f5a26fe9b [diff] |
USB: serial: iuu_phoenix: fix memory corruption
commit e7b931bee739e8a77ae216e613d3b99342b6dec0 upstream.
The driver would happily overwrite its write buffer with user data in
256 byte increments due to a removed buffer-space sanity check.
Fixes: 5fcf62b0f1f2 ("tty: iuu_phoenix: fix locking.")
Cc: stable <stable@vger.kernel.org> # 2.6.31
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>