Revision 0d63c27d9e879a0b54eb405636d60ab12040ca46 authored by Dan Carpenter on 29 August 2013, 08:47:00 UTC, committed by David S. Miller on 30 August 2013, 21:52:44 UTC
If skb->len is too short then we should return an error. Otherwise we read beyond the end of skb->data for several bytes. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 702821f
| File | Mode | Size |
|---|---|---|
| mpr.HEX | -rw-r--r-- | 9.7 KB |
| usa18x.HEX | -rw-r--r-- | 15.3 KB |
| usa19.HEX | -rw-r--r-- | 9.7 KB |
| usa19qi.HEX | -rw-r--r-- | 9.7 KB |
| usa19qw.HEX | -rw-r--r-- | 15.3 KB |
| usa19w.HEX | -rw-r--r-- | 15.3 KB |
| usa28.HEX | -rw-r--r-- | 15.8 KB |
| usa28x.HEX | -rw-r--r-- | 15.3 KB |
| usa28xa.HEX | -rw-r--r-- | 15.3 KB |
| usa28xb.HEX | -rw-r--r-- | 15.3 KB |
| usa49w.HEX | -rw-r--r-- | 15.9 KB |
| usa49wlc.HEX | -rw-r--r-- | 16.0 KB |
Computing file changes ...
