From: Dan Carpenter Date: Sun, 19 May 2013 18:52:20 +0000 (+0300) Subject: USB: cxacru: potential underflow in cxacru_cm_get_array() X-Git-Tag: v3.10-rc3~26^2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2a0ebf80aa95cc758d4725f74a7016e992606a39;p=pandora-kernel.git USB: cxacru: potential underflow in cxacru_cm_get_array() The value of "offd" comes off the instance->rcv_buf[] and we used it as the offset into an array. The problem is that we check the upper bound but not for negative values. Signed-off-by: Dan Carpenter Cc: stable Signed-off-by: Greg Kroah-Hartman --- Reading git-diff-tree failed