From: Ming Lei <tom.leim...@gmail.com> DMA length should not go beyond the availabe space of request buffer, so fix it.
Signed-off-by: Ming Lei <tom.leim...@gmail.com> Cc: Anand Gadiyar <gadi...@ti.com> Cc: Mike Frysinger <vap...@gentoo.org> Cc: Sergei Shtylyov <sshtyl...@ru.mvista.com> --- drivers/usb/musb/musb_gadget.c | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/drivers/usb/musb/musb_gadget.c b/drivers/usb/musb/musb_gadget.c index c0dfec4..e898228 100644 --- a/drivers/usb/musb/musb_gadget.c +++ b/drivers/usb/musb/musb_gadget.c @@ -662,10 +662,11 @@ static void rxstate(struct musb *musb, struct musb_request *req) if (request->actual < request->length) { int transfer_size = 0; #ifdef USE_MODE1 - transfer_size = min(request->length, + transfer_size = min(request->length - request->actual, channel->max_len); #else - transfer_size = len; + transfer_size = min(request->length - request->actual, + len); #endif if (transfer_size <= musb_ep->packet_sz) musb_ep->dma->desired_mode = 0; -- 1.6.2.5 -- To unsubscribe from this list: send the line "unsubscribe linux-omap" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html