Merge tag 'iio-fixes-for-4.4c' of git://git.kernel.org/pub/scm/linux/kernel/git/jic23/iio into staging-linus

gregkh · gregkh · commit f744c423cacf · 2015-12-26T17:07:06.000-08:00
Jonathan writes:

3rd set of IIO fixes for the 4.4 cycle.

Only a single fix this time and for a bug that's been in the kernel
since around about the start of 2013 (so no rush!)

* Out-of-bounds memory access in adis core (Analog Devices IMUs)
diff --git a/drivers/iio/imu/adis_buffer.c b/drivers/iio/imu/adis_buffer.c
@@ -43,7 +43,7 @@ int adis_update_scan_mode(struct iio_dev *indio_dev,
 		return -ENOMEM;
 
 	rx = adis->buffer;
-	tx = rx + indio_dev->scan_bytes;
+	tx = rx + scan_count;
 
 	spi_message_init(&adis->msg);
 
