| From a07088098a650267b2eda689538133a324b9523f Mon Sep 17 00:00:00 2001 |
| From: Johan Hovold <jhovold@gmail.com> |
| Date: Tue, 4 Jun 2013 18:50:29 +0200 |
| Subject: USB: keyspan: fix bogus array index |
| |
| From: Johan Hovold <jhovold@gmail.com> |
| |
| commit a07088098a650267b2eda689538133a324b9523f upstream. |
| |
| The outcont_endpoints array was indexed using the port minor number |
| (which can be greater than the array size) rather than the device port |
| number. |
| |
| Signed-off-by: Johan Hovold <jhovold@gmail.com> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| |
| --- |
| drivers/usb/serial/keyspan.c | 2 +- |
| 1 file changed, 1 insertion(+), 1 deletion(-) |
| |
| --- a/drivers/usb/serial/keyspan.c |
| +++ b/drivers/usb/serial/keyspan.c |
| @@ -1594,7 +1594,7 @@ static int keyspan_usa26_send_setup(stru |
| d_details = s_priv->device_details; |
| device_port = port->number - port->serial->minor; |
| |
| - outcont_urb = d_details->outcont_endpoints[port->number]; |
| + outcont_urb = d_details->outcont_endpoints[device_port]; |
| this_urb = p_priv->outcont_urb; |
| |
| dev_dbg(&port->dev, "%s - endpoint %d\n", __func__, usb_pipeendpoint(this_urb->pipe)); |
