From 0dcadb1e8ea98decae2011aa5c7104049a8441b8 Mon Sep 17 00:00:00 2001
From: Clemens Ladisch <clemens@ladisch.de>
Date: Wed, 31 Mar 2010 16:26:46 +0200
Subject: [PATCH] --- yaml --- r: 189932 b: refs/heads/master c:
 385ab5bcd4be586dffdba550b310308d89eade71 h: refs/heads/master v: v3

---
 [refs]                             | 2 +-
 trunk/drivers/firewire/core-cdev.c | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/[refs] b/[refs]
index f0a13fd745ab..f1ca2ee390db 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 4ba1d9c0c22947a9207029e7184733252e6135f1
+refs/heads/master: 385ab5bcd4be586dffdba550b310308d89eade71
diff --git a/trunk/drivers/firewire/core-cdev.c b/trunk/drivers/firewire/core-cdev.c
index bbb8160e2c99..5eba9e0f876c 100644
--- a/trunk/drivers/firewire/core-cdev.c
+++ b/trunk/drivers/firewire/core-cdev.c
@@ -959,6 +959,8 @@ static int ioctl_queue_iso(struct client *client, union ioctl_arg *arg)
 		u.packet.header_length = GET_HEADER_LENGTH(control);
 
 		if (ctx->type == FW_ISO_CONTEXT_TRANSMIT) {
+			if (u.packet.header_length % 4 != 0)
+				return -EINVAL;
 			header_length = u.packet.header_length;
 		} else {
 			/*