diff options
| author | Antti Palosaari <crope@iki.fi> | 2015-10-06 00:22:23 -0300 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@osg.samsung.com> | 2015-10-22 15:48:27 -0200 |
| commit | d18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2 (patch) | |
| tree | 0138be6ea930e7a10f5da1a40afce7174171f320 /drivers/media/usb/dvb-usb-v2/rtl28xxu.h | |
| parent | 17f38822038ba5d4dba79b72fd111bbf64173063 (diff) | |
| download | lwn-d18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2.tar.gz lwn-d18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2.zip | |
[media] rtl28xxu: fix control message flaws
Add lock to prevent concurrent access for control message as control
message function uses shared buffer. Without the lock there may be
remote control polling which messes the buffer causing IO errors.
Increase buffer size and add check for maximum supported message
length.
Link: https://bugzilla.kernel.org/show_bug.cgi?id=103391
Fixes: c56222a6b25c ("[media] rtl28xxu: move usb buffers to state")
Cc: <stable@vger.kernel.org> # 4.0+
Signed-off-by: Antti Palosaari <crope@iki.fi>
Diffstat (limited to 'drivers/media/usb/dvb-usb-v2/rtl28xxu.h')
| -rw-r--r-- | drivers/media/usb/dvb-usb-v2/rtl28xxu.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/usb/dvb-usb-v2/rtl28xxu.h b/drivers/media/usb/dvb-usb-v2/rtl28xxu.h index 9f6115a2ee01..138062960a73 100644 --- a/drivers/media/usb/dvb-usb-v2/rtl28xxu.h +++ b/drivers/media/usb/dvb-usb-v2/rtl28xxu.h @@ -71,7 +71,7 @@ struct rtl28xxu_dev { - u8 buf[28]; + u8 buf[128]; u8 chip_id; u8 tuner; char *tuner_name; |