diff options
| author | Heinrich Schuchardt <xypron.glpk@gmx.de> | 2016-05-08 22:50:12 +0200 |
|---|---|---|
| committer | Felipe Balbi <felipe.balbi@linux.intel.com> | 2016-05-31 11:24:30 +0300 |
| commit | e877b729c649c2850f61f2ae37296ae701f9ad63 (patch) | |
| tree | 428e47fa38118e7af581ff0a3e36e7f35351a5cf | |
| parent | ffeee83aa0461992e8a99a59db2df31933e60362 (diff) | |
usb: gadget: f_tcm: out of bound access in usbg_drop_tpg
Commit dc8c46a5ae77 ("usb: gadget: f_tcm: convert to new function
interface with backward compatibility") introduced a possible out
of bounds memory access:
If tpg is not found in function usbg_drop_tpg,
tpg_instances[TPG_INSTANCES] is accessed.
Fixes: dc8c46a5ae77 ("usb: gadget: f_tcm: convert to new function interface with backward compatibility")
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>