[media] ttusb2: limit messages to buffer size
authorAlyssa Milburn <amilburn@zall.org>
Sat, 1 Apr 2017 17:34:32 +0000 (14:34 -0300)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Wed, 19 Apr 2017 10:00:49 +0000 (07:00 -0300)
commita12b8ab8c5ff7ccd7b107a564743507c850a441d
treef479d694da58a813cdfb5a0ca6b4c6d6984a837f
parent5f2c467c54f5437e35b79fa10c73295d1e0ff586
[media] ttusb2: limit messages to buffer size

Otherwise ttusb2_i2c_xfer can read or write beyond the end of static and
heap buffers.

Signed-off-by: Alyssa Milburn <amilburn@zall.org>
Cc: stable@vger.kernel.org
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/usb/dvb-usb/ttusb2.c