kernel/drivers/media/usb/dvb-usb/af9005.c
.. .. @@ -422,6 +422,10 @@ 422 422 if (ret == 0) 423 423 ret = 2; 424 424 } else { 425 + if (msg[0].len < 2) {426 + ret = -EOPNOTSUPP;427 + goto unlock;428 + }425 429 /* write one or more registers */ 426 430 reg = msg[0].buf[0]; 427 431 addr = msg[0].addr; .. .. @@ -431,6 +435,7 @@ 431 435 ret = 1; 432 436 } 433 437 438 +unlock:434 439 mutex_unlock(&d->i2c_mutex); 435 440 return ret; 436 441 }