MUSB: Add sanity check for maximum number of endpoints
authorKevin Hilman <khilman@deeprootsystems.com>
Mon, 15 Sep 2008 10:09:31 +0000 (12:09 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Fri, 17 Oct 2008 21:40:58 +0000 (14:40 -0700)
commit02582b92f60fa33b68b90263013e98550286db0a
tree4b3a786ed87664559093061d213ea4b09df84e42
parentcede969fe21adece300300a455580635590deb47
MUSB: Add sanity check for maximum number of endpoints

There is no check if platform code passes in more endpoints (num_eps)
than the maximum number of enpoints (MUSB_C_NUM_EPS.)  The result is
that allocate_instance() happily writes past the end of 'struct musb'
corrupting memory.

This patch adds a BUG() if the platform code requests more than the max.

Signed-off-by: Kevin Hilman <khilman@deeprootsystems.com>
Acked-by: Felipe Balbi <felipe.balbi@nokia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/usb/musb/musb_core.c