USB: serial: iuu_phoenix: fix memory corruption
authorJohan Hovold <johan@kernel.org>
Wed, 15 Jul 2020 09:02:45 +0000 (11:02 +0200)
committerJohan Hovold <johan@kernel.org>
Thu, 16 Jul 2020 08:20:21 +0000 (10:20 +0200)
commite7b931bee739e8a77ae216e613d3b99342b6dec0
tree12acbe9e68c39c3c42f05159a818c0c3bf994e52
parentda6902e5b6dbca9081e3d377f9802d4fd0c5ea59
USB: serial: iuu_phoenix: fix memory corruption

The driver would happily overwrite its write buffer with user data in
256 byte increments due to a removed buffer-space sanity check.

Fixes: 5fcf62b0f1f2 ("tty: iuu_phoenix: fix locking.")
Cc: stable <stable@vger.kernel.org> # 2.6.31
Signed-off-by: Johan Hovold <johan@kernel.org>
drivers/usb/serial/iuu_phoenix.c