From: Peter Hurley <peter@hurleysoftware.com>
Date: Mon, 11 Jan 2016 04:36:12 +0000 (-0800)
Subject: tty: Fix GPF in flush_to_ldisc(), part 2
X-Git-Tag: Ubuntu-4.10.0-19.21~3758^2~160
X-Git-Url: https://git.proxmox.com/?a=commitdiff_plain;h=f33798deecbd59a2955f40ac0ae2bc7dff54c069;p=mirror_ubuntu-artful-kernel.git

tty: Fix GPF in flush_to_ldisc(), part 2

commit 9ce119f318ba ("tty: Fix GPF in flush_to_ldisc()") fixed a
GPF caused by a line discipline which does not define a receive_buf()
method.

However, the vt driver (and speakup driver also) pushes selection
data directly to the line discipline receive_buf() method via
tty_ldisc_receive_buf(). Fix the same problem in tty_ldisc_receive_buf().

Cc: <stable@vger.kernel.org>
Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

diff --git a/include/linux/tty.h b/include/linux/tty.h
index dea7d54d00d4..03e4015fa033 100644
--- a/include/linux/tty.h
+++ b/include/linux/tty.h
@@ -579,7 +579,7 @@ static inline int tty_ldisc_receive_buf(struct tty_ldisc *ld, unsigned char *p,
 		count = ld->ops->receive_buf2(ld->tty, p, f, count);
 	else {
 		count = min_t(int, count, ld->tty->receive_room);
-		if (count)
+		if (count && ld->ops->receive_buf)
 			ld->ops->receive_buf(ld->tty, p, f, count);
 	}
 	return count;