diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2012-02-21 22:30:25 +0100 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2012-02-22 21:31:54 +0100 |
commit | 22ad7499bc9297e47c8779bf5523694f28338499 (patch) | |
tree | 237ee1cd079700e3313e9ee78644deea150f0134 /drivers/net/usb/hso.c | |
parent | netfilter: ip6_route_output() never returns NULL. (diff) | |
download | linux-22ad7499bc9297e47c8779bf5523694f28338499.tar.xz linux-22ad7499bc9297e47c8779bf5523694f28338499.zip |
hso: memsetting wrong data in hso_get_count()
The intent was to clear out the icount struct here, but we accidentally
clear stack memory instead. It probably will lead to a NULL dereference
right away.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
-rw-r--r-- | drivers/net/usb/hso.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/usb/hso.c b/drivers/net/usb/hso.c index 304fe78ff60e..e1324b4a0f66 100644 --- a/drivers/net/usb/hso.c +++ b/drivers/net/usb/hso.c @@ -1632,7 +1632,7 @@ static int hso_get_count(struct tty_struct *tty, struct hso_serial *serial = get_serial_by_tty(tty); struct hso_tiocmget *tiocmget = serial->tiocmget; - memset(&icount, 0, sizeof(struct serial_icounter_struct)); + memset(icount, 0, sizeof(struct serial_icounter_struct)); if (!tiocmget) return -ENOENT; |