forked from luck/tmp_suning_uos_patched
02582b92f6
There is no check if platform code passes in more endpoints (num_eps) than the maximum number of enpoints (MUSB_C_NUM_EPS.) The result is that allocate_instance() happily writes past the end of 'struct musb' corrupting memory. This patch adds a BUG() if the platform code requests more than the max. Signed-off-by: Kevin Hilman <khilman@deeprootsystems.com> Acked-by: Felipe Balbi <felipe.balbi@nokia.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> |
||
---|---|---|
.. | ||
cppi_dma.c | ||
cppi_dma.h | ||
davinci.c | ||
davinci.h | ||
Kconfig | ||
Makefile | ||
musb_core.c | ||
musb_core.h | ||
musb_debug.h | ||
musb_dma.h | ||
musb_gadget_ep0.c | ||
musb_gadget.c | ||
musb_gadget.h | ||
musb_host.c | ||
musb_host.h | ||
musb_io.h | ||
musb_regs.h | ||
musb_virthub.c | ||
musbhsdma.c | ||
omap2430.c | ||
omap2430.h | ||
tusb6010_omap.c | ||
tusb6010.c | ||
tusb6010.h |