---

yaml --- r: 185215 b: refs/heads/master c: 5d0a9c7 h: refs/heads/master i: 185213: 847ccb0 185211: 553cca9 185207: 9dc1a90 185199: 84b4c9e 185183: ae27452 185151: 4d178c6 185087: 24d08d0 v: v3
git-mirror · Mar 2, 2010 · 557348b · 557348b
1 parent 9e0265a
commit 557348b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/[refs] b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 1bfbd283cd3082b6cadfbf340faf7d35b8a36b83
+refs/heads/master: 5d0a9c7932c45435de72b5a5b2825c7eb34186a4
diff --git a/trunk/drivers/usb/atm/cxacru.c b/trunk/drivers/usb/atm/cxacru.c
@@ -596,7 +596,7 @@ static int cxacru_cm_get_array(struct cxacru_data *instance, enum cxacru_cm_requ
 	len = ret / 4;
 	for (offb = 0; offb < len; ) {
 		int l = le32_to_cpu(buf[offb++]);
-		if (l > stride || l > (len - offb) / 2) {
+		if (l < 0 || l > stride || l > (len - offb) / 2) {
 			if (printk_ratelimit())
 				usb_err(instance->usbatm, "invalid data length from cm %#x: %d\n",
 					cm, l);