diff options
| author |   Dan Carpenter <dan.carpenter@oracle.com> | 2020-12-03 11:41:13 +0300 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-12-07 15:26:18 +0100 |
| commit | 3f6f6343a29d9ea7429306b83b18e66dc1331d5c (patch) | |
| tree | d3e4042f75a1ba65d6d4ff9fe008147841782ffa | |
| parent | USB: dummy-hcd: Fix uninitialized array use in init() (diff) | |
| download | wireguard-linux-3f6f6343a29d9ea7429306b83b18e66dc1331d5c.tar.xz wireguard-linux-3f6f6343a29d9ea7429306b83b18e66dc1331d5c.zip | |
usb: mtu3: fix memory corruption in mtu3_debugfs_regset()
This code is using the wrong sizeof() so it does not allocate enough
memory. It allocates 32 bytes but 72 are required. That will lead to
memory corruption.
Fixes: ae07809255d3 ("usb: mtu3: add debugfs interface files")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/X8ikqc4Mo2/0G72j@mwanda
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | drivers/usb/mtu3/mtu3_debugfs.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/usb/mtu3/mtu3_debugfs.c b/drivers/usb/mtu3/mtu3_debugfs.c index fdeade6254ae..7537bfd651af 100644 --- a/drivers/usb/mtu3/mtu3_debugfs.c +++ b/drivers/usb/mtu3/mtu3_debugfs.c @@ -127,7 +127,7 @@ static void mtu3_debugfs_regset(struct mtu3 *mtu, void __iomem *base, struct debugfs_regset32 *regset; struct mtu3_regset *mregs; - mregs = devm_kzalloc(mtu->dev, sizeof(*regset), GFP_KERNEL); + mregs = devm_kzalloc(mtu->dev, sizeof(*mregs), GFP_KERNEL); if (!mregs) return; |