Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit ee7aa6ce authored by Axel Lin's avatar Axel Lin Committed by Dmitry Torokhov
Browse files

Input: kbtab - fix incorrect size parameter in usb_buffer_free 



The size allocated by usb_buffer_alloc() is 8, however the size passed
to usb_buffer_free() is 10.

Signed-off-by: default avatarAxel Lin <axel.lin@gmail.com>
Signed-off-by: default avatarDmitry Torokhov <dtor@mail.ru>
parent 893d1cdd

drivers/input/tablet/kbtab.c

+2 −2
Original line number Original line Diff line number Diff line
@@ -182,7 +182,7 @@ static int kbtab_probe(struct usb_interface *intf, const struct usb_device_id *i 
	return 0;

	return 0;





 fail3:	usb_free_urb(kbtab->irq);

 fail3:	usb_free_urb(kbtab->irq);

 fail2:	usb_buffer_free(dev, 10, kbtab->data, kbtab->data_dma);

 fail2:	usb_buffer_free(dev, 8, kbtab->data, kbtab->data_dma);

 fail1:	input_free_device(input_dev);

 fail1:	input_free_device(input_dev);

	kfree(kbtab);

	kfree(kbtab);

	return error;

	return error;
@@ -197,7 +197,7 @@ static void kbtab_disconnect(struct usb_interface *intf) 
		usb_kill_urb(kbtab->irq);

		usb_kill_urb(kbtab->irq);

		input_unregister_device(kbtab->dev);

		input_unregister_device(kbtab->dev);

		usb_free_urb(kbtab->irq);

		usb_free_urb(kbtab->irq);

		usb_buffer_free(interface_to_usbdev(intf), 10, kbtab->data, kbtab->data_dma);

		usb_buffer_free(interface_to_usbdev(intf), 8, kbtab->data, kbtab->data_dma);

		kfree(kbtab);

		kfree(kbtab);

	}

	}

}

}