diff options
| author | Kevin Hilman <khilman@deeprootsystems.com> | 2008-09-15 12:09:31 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2008-10-17 14:40:58 -0700 |
| commit | 02582b92f60fa33b68b90263013e98550286db0a (patch) | |
| tree | 4b3a786ed87664559093061d213ea4b09df84e42 /drivers/bluetooth/bluecard_cs.c | |
| parent | cede969fe21adece300300a455580635590deb47 (diff) | |
MUSB: Add sanity check for maximum number of endpoints
There is no check if platform code passes in more endpoints (num_eps)
than the maximum number of enpoints (MUSB_C_NUM_EPS.) The result is
that allocate_instance() happily writes past the end of 'struct musb'
corrupting memory.
This patch adds a BUG() if the platform code requests more than the max.
Signed-off-by: Kevin Hilman <khilman@deeprootsystems.com>
Acked-by: Felipe Balbi <felipe.balbi@nokia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/bluetooth/bluecard_cs.c')
0 files changed, 0 insertions, 0 deletions