2 files changed, 9 insertions, 5 deletions

diff --git a/drivers/net/usb/rndis_host.c b/drivers/net/usb/rndis_host.c
index a61324757b17..727547a28992 100644
--- a/drivers/net/usb/rndis_host.c
+++ b/drivers/net/usb/rndis_host.c
@@ -16,10 +16,6 @@
  * along with this program; if not, write to the Free Software
  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  */
-
-// #define      DEBUG                   // error path messages, extra info
-// #define      VERBOSE                 // more; success messages
-
 #include <linux/module.h>
 #include <linux/init.h>
 #include <linux/netdevice.h>
@@ -318,6 +314,14 @@ generic_rndis_bind(struct usbnet *dev, struct usb_interface *intf, int flags)
         net->hard_header_len += sizeof (struct rndis_data_hdr);
         dev->hard_mtu = net->mtu + net->hard_header_len;
 
+        dev->maxpacket = usb_maxpacket(dev->udev, dev->out, 1);
+        if (dev->maxpacket == 0) {
+                if (netif_msg_probe(dev))
+                        dev_dbg(&intf->dev, "dev->maxpacket can't be 0\n");
+                retval = -EINVAL;
+                goto fail_and_release;
+        }
+
         dev->rx_urb_size = dev->hard_mtu + (dev->maxpacket + 1);
         dev->rx_urb_size &= ~(dev->maxpacket - 1);
         u.init->max_transfer_size = cpu_to_le32(dev->rx_urb_size);
diff --git a/drivers/net/usb/rtl8150.c b/drivers/net/usb/rtl8150.c
index 7e1f00131f91..df56a518691c 100644
--- a/drivers/net/usb/rtl8150.c
+++ b/drivers/net/usb/rtl8150.c
@@ -376,7 +376,7 @@ static int alloc_all_urbs(rtl8150_t * dev)
                 return 0;
         }
         dev->ctrl_urb = usb_alloc_urb(0, GFP_KERNEL);
-        if (!dev->intr_urb) {
+        if (!dev->ctrl_urb) {
                 usb_free_urb(dev->rx_urb);
                 usb_free_urb(dev->tx_urb);
                 usb_free_urb(dev->intr_urb);