From: Kevin McKinney Date: Sun, 18 Sep 2011 22:34:46 +0000 (-0400) Subject: Staging: bcm: Add size minimum size restrictions for IOCTL_IDLE_REQ X-Git-Tag: v3.2-rc1~169^2^2~403 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5ac5bd8754b3dabcf4aea7b5f4a28a1d8494a1b0;p=pandora-kernel.git Staging: bcm: Add size minimum size restrictions for IOCTL_IDLE_REQ If IoBuffer.InputLength is zero then this will cause an Oops when we dereference the ZERO_SIZE_PTR. Or if it's smaller than sizeof(struct link_request) then we would get memory corruption when we set ->PLength in CopyBufferToControlPacket(). Signed-off-by: Kevin McKinney Signed-off-by: Greg Kroah-Hartman --- Reading git-diff-tree failed