• Zwane Mwaikambo's avatar
    [PATCH] USB core/config.c == memory corruption · 34bc27e5
    Zwane Mwaikambo authored
    parse_interface allocates the incorrect storage size for additional
    altsettings (new buffer) leading to a BUG being triggered in
    mm/slab.c:1453 when we do the memcpy from the old buffer to the new
    buffer (writing beyond new buffer).
    Patch appended, tested with an OV511 on an Intel PIIX4
    34bc27e5
config.c 12.7 KB