projects / linux-2.6-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f07c541) | patch
USB: serial: iuu_phoenix: fix memory corruption
authorJohan Hovold <johan@kernel.org>
Wed, 15 Jul 2020 09:02:45 +0000 (11:02 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 22 Jul 2020 07:34:18 +0000 (09:34 +0200)
commite33f019f85851f963f9a4a37c9a0e957d139b464
tree3200100fd638e9bfb9c7df646959d299e3e6b02ftree
parentf07c5414c9ebb84a561ec05337d8e92a021e00a4commit | diff
USB: serial: iuu_phoenix: fix memory corruption

commit e7b931bee739e8a77ae216e613d3b99342b6dec0 upstream.

The driver would happily overwrite its write buffer with user data in
256 byte increments due to a removed buffer-space sanity check.

Fixes: 5fcf62b0f1f2 ("tty: iuu_phoenix: fix locking.")
Cc: stable <stable@vger.kernel.org> # 2.6.31
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/serial/iuu_phoenix.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)