iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()

Browse source

commit eda7d0f38a upstream.

"num_read" is in byte units but we are write u16s so we end up write
twice as much as intended.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jonathan Cameron <jic23@kernel.org>
[ luis: backported to 3.16: adjusted context ]
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>

...

This commit is contained in:

Dan Carpenter 2015-08-08 22:16:42 +03:00 • committed by Luis Henriques

parent 50ea922c4c

commit 5beb4a0700

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/staging/iio/accel/sca3000_ring.c

View file