Tilman Schmidt
86f8ef2c48
isdn/gigaset: fix usb_gigaset write_cmd result race
...
In usb_gigaset function gigaset_write_cmd(), the length field of
the command buffer structure could be cleared by the transmit
tasklet before it was used for the function's return value.
Fix by copying to a local variable before scheduling the tasklet.
Signed-off-by: Tilman Schmidt <tilman@imap.cc>
Signed-off-by: David S. Miller <davem@davemloft.net>
2014-10-14 15:05:35 -04:00
..
act2000
isdn: replace del_timer by del_timer_sync
2014-03-27 15:28:06 -04:00
capi
isdn/capi: don't return NULL from capi_cmd2str()
2014-10-14 15:05:35 -04:00
divert
isdn: divert, hysdn: fix interruptible_sleep_on race
2014-02-26 16:06:13 -05:00
gigaset
isdn/gigaset: fix usb_gigaset write_cmd result race
2014-10-14 15:05:35 -04:00
hardware
drivers: isdn: eicon: xdi_msg.h: Fix typo in #ifndef
2014-08-22 11:31:30 -07:00
hisax
isdn: hisax: l3ni1.c: Fix for possible null pointer dereference
2014-07-08 16:06:21 -07:00
hysdn
isdn: divert, hysdn: fix interruptible_sleep_on race
2014-02-26 16:06:13 -05:00
i4l
isdn: i4l: Remove ASYNC_CTS_FLOW
2014-09-23 21:19:35 -07:00
icn
isdn: icn: buffer overflow in icn_command()
2014-04-16 15:24:15 -04:00
isdnloop
isdnloop: several buffer overflows
2014-04-08 12:41:13 -04:00
mISDN
mISDN: remove DSP_NEVER_DEFINED and adjust code identation
2014-09-05 22:20:21 -07:00
pcbit
ISDN: pcbit: off by one bugs in pcbit_set_msn()
2014-07-31 22:14:54 -07:00
sc
isdn: replace del_timer by del_timer_sync
2014-03-27 15:28:06 -04:00
Kconfig
Makefile