commit db332bc9b26bbd79a37241721cccc9919489d5a9
author Paul Zimmerman <Paul.Zimmerman@synopsys.com> Thu Oct 13 17:46:36 2011 -0700
committer Greg Kroah-Hartman <gregkh@suse.de> Mon Nov 14 11:51:24 2011 -0800
tree 37e48041f7e0eb2f53bedf186e6a633bd546b6d0
parent b7a8d17db9a86db1040862600cf3a02848f83844

usb: gadget: storage: check for valid USB_BULK_GET_MAX_LUN_REQUEST

The latest USB-IF CV tester checks for a valid length for this
request.

Signed-off-by: Paul Zimmerman <paulz@synopsys.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Felipe Balbi <balbi@ti.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

drivers/usb/gadget/file_storage.c

diff --git a/drivers/usb/gadget/file_storage.c b/drivers/usb/gadget/file_storage.c
index f7e39b0..4314cf2 100644
--- a/drivers/usb/gadget/file_storage.c
+++ b/drivers/usb/gadget/file_storage.c
@@ -875,7 +875,7 @@
 			if (ctrl->bRequestType != (USB_DIR_IN |
 					USB_TYPE_CLASS | USB_RECIP_INTERFACE))
 				break;
-			if (w_index != 0 || w_value != 0) {
+			if (w_index != 0 || w_value != 0 || w_length != 1) {
 				value = -EDOM;
 				break;
 			}