From 557348b1f539a0423fc632a761ad635c6f271775 Mon Sep 17 00:00:00 2001
From: Simon Arlott <simon@fire.lp0.eu>
Date: Sat, 21 Nov 2009 15:07:14 +0000
Subject: [PATCH] --- yaml --- r: 185215 b: refs/heads/master c:
 5d0a9c7932c45435de72b5a5b2825c7eb34186a4 h: refs/heads/master i:   185213:
 847ccb0efa96f51056702f5271b6888fd2111c10   185211:
 553cca948b48e40e04c0fb186ae6121f7e8e9027   185207:
 9dc1a90ab772b7a21bb06a43fe06d4f0d3a4db36   185199:
 84b4c9ea135fd03cc4318f93c5ab0825f96e39e1   185183:
 ae274528b3e04a482a2b9a6d13ea85861f8ed536   185151:
 4d178c6715f3ac6d22d097a4abaa590181d12816   185087:
 24d08d09f5a66060617682cda5732cb2865320e2 v: v3

---
 [refs]                         | 2 +-
 trunk/drivers/usb/atm/cxacru.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/[refs] b/[refs]
index 92ff03cbe938..384b4696f03a 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 1bfbd283cd3082b6cadfbf340faf7d35b8a36b83
+refs/heads/master: 5d0a9c7932c45435de72b5a5b2825c7eb34186a4
diff --git a/trunk/drivers/usb/atm/cxacru.c b/trunk/drivers/usb/atm/cxacru.c
index 4a26a6c93bec..8da4a06bf140 100644
--- a/trunk/drivers/usb/atm/cxacru.c
+++ b/trunk/drivers/usb/atm/cxacru.c
@@ -596,7 +596,7 @@ static int cxacru_cm_get_array(struct cxacru_data *instance, enum cxacru_cm_requ
 	len = ret / 4;
 	for (offb = 0; offb < len; ) {
 		int l = le32_to_cpu(buf[offb++]);
-		if (l > stride || l > (len - offb) / 2) {
+		if (l < 0 || l > stride || l > (len - offb) / 2) {
 			if (printk_ratelimit())
 				usb_err(instance->usbatm, "invalid data length from cm %#x: %d\n",
 					cm, l);