USB: resizing usbmon binary interface buffer causes protection faults
authorSteven Robertson <steven@strobe.cc>
Wed, 21 Jul 2010 20:38:44 +0000 (16:38 -0400)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 10 Aug 2010 21:35:41 +0000 (14:35 -0700)
commit33d973ad88ceb83ed1449592b7574b5b5bb33ac6
treeb2dec9a1718a66c05436fc94fcb646813b99c155
parent92eb2a5e533f39e8afc831acbbfdabe91cd0c20a
USB: resizing usbmon binary interface buffer causes protection faults

Enlarging the buffer size via the MON_IOCT_RING_SIZE ioctl causes
general protection faults. It appears the culprit is an incorrect
argument to mon_free_buff: instead of passing the size of the current
buffer being freed, the size of the new buffer is passed.

Use the correct size argument to mon_free_buff when changing the size of
the buffer.

Signed-off-by: Steven Robertson <steven@strobe.cc>
Acked-by: Pete Zaitcev <zaitcev@redhat.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/usb/mon/mon_bin.c