tree df92d20c8ae97040a0b9cd54d1bc350a6a7ba1ea
parent 4fb228ae24ec90d8dd5e030fa25effcac0664724
author Johan Hovold <johan@kernel.org> 1488818197 +0100
committer Ben Hutchings <ben@decadent.org.uk> 1500399510 +0100

USB: serial: io_ti: fix NULL-deref in interrupt callback

commit 0b1d250afb8eb9d65afb568bac9b9f9253a82b49 upstream.

Fix a NULL-pointer dereference in the interrupt callback should a
malicious device send data containing a bad port number by adding the
missing sanity check.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Johan Hovold <johan@kernel.org>
[bwh: Backported to 3.2:
 - Use &urb->dev->dev instead of local dev variable
 - Adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>