media: technisat-usb2: break out of loop at end of buffer
authorSean Young <sean@mess.org>
Wed, 3 Jul 2019 14:52:39 +0000 (10:52 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 21 Sep 2019 05:17:15 +0000 (07:17 +0200)
commitb841a9f58d9c778d8c2c5f636dc06a53b9a47fa1
tree00883de032c3b15d2eb61cb43cbebc24af526d8b
parentf35f5a990a07133b29a9d92ec06b7ccdf4fd5067
media: technisat-usb2: break out of loop at end of buffer

commit 0c4df39e504bf925ab666132ac3c98d6cbbe380b upstream.

Ensure we do not access the buffer beyond the end if no 0xff byte
is encountered.

Reported-by: syzbot+eaaaf38a95427be88f4b@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/usb/dvb-usb/technisat-usb2.c