media: ttusb-dec: buffer overflow in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 5 Sep 2014 12:09:28 +0000 (09:09 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Nov 2014 17:23:04 +0000 (09:23 -0800)
commitc8e0fd4818f29aaafafb01f0bacf376b86e82830
tree73abe778ca1a024c1ef1fa86b06dce02fe3517e3
parent215894c980ccbc13d3ca8333cf329f305e6014d8
media: ttusb-dec: buffer overflow in ioctl

commit f2e323ec96077642d397bb1c355def536d489d16 upstream.

We need to add a limit check here so we don't overflow the buffer.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/usb/ttusb-dec/ttusbdecfe.c