diff options
| -rw-r--r-- | drivers/isdn/mISDN/dsp_core.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/drivers/isdn/mISDN/dsp_core.c b/drivers/isdn/mISDN/dsp_core.c index 22b720ec80cb..77025f5cb57d 100644 --- a/drivers/isdn/mISDN/dsp_core.c +++ b/drivers/isdn/mISDN/dsp_core.c | |||
| @@ -288,8 +288,10 @@ dsp_control_req(struct dsp *dsp, struct mISDNhead *hh, struct sk_buff *skb) | |||
| 288 | u8 *data; | 288 | u8 *data; |
| 289 | int len; | 289 | int len; |
| 290 | 290 | ||
| 291 | if (skb->len < sizeof(int)) | 291 | if (skb->len < sizeof(int)) { |
| 292 | printk(KERN_ERR "%s: PH_CONTROL message too short\n", __func__); | 292 | printk(KERN_ERR "%s: PH_CONTROL message too short\n", __func__); |
| 293 | return -EINVAL; | ||
| 294 | } | ||
| 293 | cont = *((int *)skb->data); | 295 | cont = *((int *)skb->data); |
| 294 | len = skb->len - sizeof(int); | 296 | len = skb->len - sizeof(int); |
| 295 | data = skb->data + sizeof(int); | 297 | data = skb->data + sizeof(int); |
