| commit | 064b8f10414d51ae972f80518e320dc5cff9f1f8 | |
| author | Steven Robertson <steven@strobe.cc> | |
| Wed, 21 Jul 2010 20:38:44 +0000 (21 16:38 -0400) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Fri, 13 Aug 2010 20:30:58 +0000 (13 13:30 -0700) | ||
| tree | 5280ae9933b63877aebd48bf3c4a4d028a96cf80 | treesnapshot (tar.gz zip) |
| parent | a6b37a9ed03585d0e1e132d424569003be2abba2 | commitdiff |
USB: resizing usbmon binary interface buffer causes protection faults
commit 33d973ad88ceb83ed1449592b7574b5b5bb33ac6 upstream.
Enlarging the buffer size via the MON_IOCT_RING_SIZE ioctl causes
general protection faults. It appears the culprit is an incorrect
argument to mon_free_buff: instead of passing the size of the current
buffer being freed, the size of the new buffer is passed.
Use the correct size argument to mon_free_buff when changing the size of
the buffer.
Signed-off-by: Steven Robertson <steven@strobe.cc>
Acked-by: Pete Zaitcev <zaitcev@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit 33d973ad88ceb83ed1449592b7574b5b5bb33ac6 upstream.
Enlarging the buffer size via the MON_IOCT_RING_SIZE ioctl causes
general protection faults. It appears the culprit is an incorrect
argument to mon_free_buff: instead of passing the size of the current
buffer being freed, the size of the new buffer is passed.
Use the correct size argument to mon_free_buff when changing the size of
the buffer.
Signed-off-by: Steven Robertson <steven@strobe.cc>
Acked-by: Pete Zaitcev <zaitcev@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| drivers/usb/mon/mon_bin.c | diffblobblamehistory |