zr364xx: enforce minimum size when reading header
authorAlyssa Milburn <amilburn@zall.org>
Sat, 1 Apr 2017 17:34:08 +0000 (14:34 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 May 2017 13:44:42 +0000 (15:44 +0200)
commit64579fcc57fd00e1e9f021eba90d01d3371dc6b7
tree39d8f77a7471def7776388d91bdf82d61b507c02
parent466b45af50fd27754dff2982c65396c5ca9d461c
zr364xx: enforce minimum size when reading header

commit ee0fe833d96793853335844b6d99fb76bd12cbeb upstream.

This code copies actual_length-128 bytes from the header, which will
underflow if the received buffer is too small.

Signed-off-by: Alyssa Milburn <amilburn@zall.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/usb/zr364xx/zr364xx.c