media: ttusb-dec: buffer overflow in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 5 Sep 2014 12:09:28 +0000 (09:09 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Nov 2014 17:22:54 +0000 (09:22 -0800)
commit0ec4fc584c3ee470f5150450acf49dd2dab5d1e7
treef81651850202e0ab96e9978f954131b3bbc0ff1b
parent270e234c60d21681ac2afc04329cc0b5ab4ff035
media: ttusb-dec: buffer overflow in ioctl

commit f2e323ec96077642d397bb1c355def536d489d16 upstream.

We need to add a limit check here so we don't overflow the buffer.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/usb/ttusb-dec/ttusbdecfe.c