diff options
author | 2011-09-27 09:20:50 +0300 | |
---|---|---|
committer | 2011-09-29 13:23:33 -0700 | |
commit | 53d785ccd918d571c227d459477793872676fc02 (patch) | |
tree | 538c8f731207bf916aad708b5c39f03b9ab58c55 /drivers/i2c/algos/i2c-algo-bit.c | |
parent | tty/n_gsm: avoid fifo overflow in gsm_dlci_data_output (diff) | |
download | wireguard-linux-53d785ccd918d571c227d459477793872676fc02.tar.xz wireguard-linux-53d785ccd918d571c227d459477793872676fc02.zip |
TTY: snyclinkmp: forever loop in tx_load_dma_buffer()
My main concern here was the line that said:
copy_count = min_t(unsigned short,count,SCABUFSIZE);
"count" is an unsigned int here so the cast to unsigned short
truncates the upper bits. So if count is 0x10000 then copy_count is
0 and the loop never exits.
"count" comes from skb->len in hdlcdev_xmit().
The other min_t() changes are just cleanups.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/i2c/algos/i2c-algo-bit.c')
0 files changed, 0 insertions, 0 deletions