summaryrefslogtreecommitdiffstats
path: root/drivers/usb/serial/keyspan.c
diff options
context:
space:
mode:
authorJohan Hovold <jhovold@gmail.com>2013-06-04 18:50:29 +0200
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2013-06-04 19:17:09 +0200
commita07088098a650267b2eda689538133a324b9523f (patch)
tree50578f0a7a780c6ebd141f063d9746dd64ec7510 /drivers/usb/serial/keyspan.c
parentUSB: zte_ev: fix broken open (diff)
downloadlinux-a07088098a650267b2eda689538133a324b9523f.tar.xz
linux-a07088098a650267b2eda689538133a324b9523f.zip
USB: keyspan: fix bogus array index
The outcont_endpoints array was indexed using the port minor number (which can be greater than the array size) rather than the device port number. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold <jhovold@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/serial/keyspan.c')
-rw-r--r--drivers/usb/serial/keyspan.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/usb/serial/keyspan.c b/drivers/usb/serial/keyspan.c
index eb30d7b01f36..d85a3e037490 100644
--- a/drivers/usb/serial/keyspan.c
+++ b/drivers/usb/serial/keyspan.c
@@ -1559,7 +1559,7 @@ static int keyspan_usa26_send_setup(struct usb_serial *serial,
d_details = s_priv->device_details;
device_port = port->number - port->serial->minor;
- outcont_urb = d_details->outcont_endpoints[port->number];
+ outcont_urb = d_details->outcont_endpoints[device_port];
this_urb = p_priv->outcont_urb;
dev_dbg(&port->dev, "%s - endpoint %d\n", __func__, usb_pipeendpoint(this_urb->pipe));