USB: fix oops in usb_sg_init()
authorAlan Stern <stern@rowland.harvard.edu>
Fri, 18 Jun 2010 14:16:33 +0000 (10:16 -0400)
committerGreg Kroah-Hartman <gregkh@suse.de>
Wed, 30 Jun 2010 15:16:06 +0000 (08:16 -0700)
commit64d65872f96e2a754caa12ef48949c314384bd9f
tree1fbd174ef9b2df672a68f81c960599c39b238286
parent3b49d2315c119b9ae8a9a33b07d4eb7d194c01a7
USB: fix oops in usb_sg_init()

This patch (as1401) fixes a bug in usb_sg_init() that can cause an
invalid pointer dereference.  An inner loop reuses some local variables
in an unsafe manner, so new variables are introduced.

Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Tested-by: Ajay Kumar Gupta <ajay.gupta@ti.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/usb/core/message.c