Commit 30d35e49 authored by Jean-Francois Moine's avatar Jean-Francois Moine Committed by Mauro Carvalho Chehab
Browse files

V4L/DVB (11711): gspca - main: Fix a crash when no bandwidth available 



When the bandwidth is not wide enough, the transfer endpoint may be set to
the one of the alternate setting 0. This one may be null and this causes a
divide by 0 oops.

Reported-by: default avatarHans de Goede <hdegoede@redhat.com>
Signed-off-by: default avatarJean-Francois Moine <moinejf@free.fr>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@redhat.com>
parent 6929dc6b

drivers/media/video/gspca/gspca.c

+2 −1
Original line number Diff line number Diff line
@@ -449,7 +449,8 @@ static struct usb_host_endpoint *alt_xfer(struct usb_host_interface *alt, 
	for (i = 0; i < alt->desc.bNumEndpoints; i++) {

		ep = &alt->endpoint[i];

		attr = ep->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK;

		if (attr == xfer)

		if (attr == xfer

		    && ep->desc.wMaxPacketSize != 0)

			return ep;

	}

	return NULL;