From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Sun, 19 May 2013 18:52:20 +0000 (+0300)
Subject: USB: cxacru: potential underflow in cxacru_cm_get_array()
X-Git-Tag: v3.2.46~43
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e75b61897276c5100e61c9c74fd55ded28f31431;p=pandora-kernel.git

USB: cxacru: potential underflow in cxacru_cm_get_array()

commit 2a0ebf80aa95cc758d4725f74a7016e992606a39 upstream.

The value of "offd" comes off the instance->rcv_buf[] and we used it as
the offset into an array.  The problem is that we check the upper bound
but not for negative values.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---

Reading git-diff-tree failed