Messages in this thread | | | Date | Tue, 9 Feb 2010 05:08:04 -0800 | From | Greg KH <> | Subject | Re: [PATCH] USB: don't read past config->interface[] if usb_control_msg() fails in usb_reset_configuration() |
| |
On Tue, Feb 09, 2010 at 02:00:05PM +0100, Roel Kluin wrote: > After the loop `for (i = 0; i < config->desc.bNumInterfaces; i++)' if no > break occurred, i equals config->desc.bNumInterfaces. so if > usb_control_msg() failed then after goto reset_old_alts we read from > config->interface[config->desc.bNumInterfaces]. > > Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Have you seen this happen on real hardware?
curious,
greg k-h
| |