Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c40499e0 authored by Roel Kluin's avatar Roel Kluin Committed by David S. Miller
Browse files

gigaset: beyond ARRAY_SIZE of iwb->data 



Signed-off-by: default avatarRoel Kluin <roel.kluin@gmail.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 4f724279

drivers/isdn/gigaset/isocdata.c

+1 −1
Original line number Diff line number Diff line
@@ -175,7 +175,7 @@ int gigaset_isowbuf_getbytes(struct isowbuf_t *iwb, int size) 
		return -EINVAL;

	}

	src = iwb->read;

	if (unlikely(limit > BAS_OUTBUFSIZE + BAS_OUTBUFPAD ||

	if (unlikely(limit >= BAS_OUTBUFSIZE + BAS_OUTBUFPAD ||

		     (read < src && limit >= src))) {

		pr_err("isoc write buffer frame reservation violated\n");

		return -EFAULT;