This is a note to let you know that I've just added the patch titled

    USB: keyspan: fix bogus array index

to the 3.4-stable tree which can be found at:
    
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     usb-keyspan-fix-bogus-array-index.patch
and it can be found in the queue-3.4 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.


>From a07088098a650267b2eda689538133a324b9523f Mon Sep 17 00:00:00 2001
From: Johan Hovold <[email protected]>
Date: Tue, 4 Jun 2013 18:50:29 +0200
Subject: USB: keyspan: fix bogus array index

From: Johan Hovold <[email protected]>

commit a07088098a650267b2eda689538133a324b9523f upstream.

The outcont_endpoints array was indexed using the port minor number
(which can be greater than the array size) rather than the device port
number.

Signed-off-by: Johan Hovold <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>

---
 drivers/usb/serial/keyspan.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/drivers/usb/serial/keyspan.c
+++ b/drivers/usb/serial/keyspan.c
@@ -1705,7 +1705,7 @@ static int keyspan_usa26_send_setup(stru
        d_details = s_priv->device_details;
        device_port = port->number - port->serial->minor;
 
-       outcont_urb = d_details->outcont_endpoints[port->number];
+       outcont_urb = d_details->outcont_endpoints[device_port];
        this_urb = p_priv->outcont_urb;
 
        dbg("%s - endpoint %d", __func__, usb_pipeendpoint(this_urb->pipe));


Patches currently in stable-queue which might be from [email protected] are

queue-3.4/usb-serial-fix-treo-kyocera-interrrupt-in-urb-context.patch
queue-3.4/usb-mos7720-fix-dma-to-stack.patch
queue-3.4/usb-iuu_phoenix-fix-bulk-message-timeout.patch
queue-3.4/usb-whiteheat-fix-broken-port-configuration.patch
queue-3.4/usb-mos7720-fix-hardware-flow-control.patch
queue-3.4/usb-keyspan-fix-bogus-array-index.patch
queue-3.4/usb-ark3116-fix-control-message-timeout.patch
queue-3.4/usb-mos7720-fix-message-timeouts.patch
queue-3.4/usb-visor-fix-initialisation-of-treo-kyocera-devices.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to