tree 06f2a5c39a9158f62c9cf78addb4269cd2c8e54f
parent 7518b9b8fc72a6c0ba67f33bdd4689c7dd28686a
author Kevin McKinney <klmckinney1@gmail.com> 1316385286 -0400
committer Greg Kroah-Hartman <gregkh@suse.de> 1316454377 -0700

Staging: bcm: Add size minimum size restrictions for IOCTL_IDLE_REQ

If IoBuffer.InputLength is zero then this will cause an Oops when
we dereference the ZERO_SIZE_PTR.  Or if it's smaller than
sizeof(struct link_request) then we would get memory corruption
when we set ->PLength in CopyBufferToControlPacket().

Signed-off-by: Kevin McKinney <klmckinney1@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>