[media] rtl28xxu: fix control message flaws
authorAntti Palosaari <crope@iki.fi>
Tue, 6 Oct 2015 03:22:23 +0000 (00:22 -0300)
committerMauro Carvalho Chehab <mchehab@osg.samsung.com>
Thu, 22 Oct 2015 17:48:27 +0000 (15:48 -0200)
commitd18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2
tree0138be6ea930e7a10f5da1a40afce7174171f320
parent17f38822038ba5d4dba79b72fd111bbf64173063
[media] rtl28xxu: fix control message flaws

Add lock to prevent concurrent access for control message as control
message function uses shared buffer. Without the lock there may be
remote control polling which messes the buffer causing IO errors.
Increase buffer size and add check for maximum supported message
length.

Link: https://bugzilla.kernel.org/show_bug.cgi?id=103391
Fixes: c56222a6b25c ("[media] rtl28xxu: move usb buffers to state")

Cc: <stable@vger.kernel.org> # 4.0+
Signed-off-by: Antti Palosaari <crope@iki.fi>
drivers/media/usb/dvb-usb-v2/rtl28xxu.c
drivers/media/usb/dvb-usb-v2/rtl28xxu.h