Revision 0d63c27d9e879a0b54eb405636d60ab12040ca46 authored by Dan Carpenter on 29 August 2013, 08:47:00 UTC, committed by David S. Miller on 30 August 2013, 21:52:44 UTC
If skb->len is too short then we should return an error. Otherwise we read beyond the end of skb->data for several bytes. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 702821f
| File | Mode | Size |
|---|---|---|
| R100_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| R200_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| R300_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| R420_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| R520_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| R600_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| R600_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RS600_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| RS690_cp.bin.ihex | -rw-r--r-- | 5.6 KB |
| RS780_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| RS780_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RV610_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| RV610_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RV620_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| RV620_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RV630_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| RV630_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RV635_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| RV635_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RV670_me.bin.ihex | -rw-r--r-- | 57.8 KB |
| RV670_pfp.bin.ihex | -rw-r--r-- | 6.2 KB |
| RV710_me.bin.ihex | -rw-r--r-- | 14.6 KB |
| RV710_pfp.bin.ihex | -rw-r--r-- | 9.1 KB |
| RV730_me.bin.ihex | -rw-r--r-- | 14.6 KB |
| RV730_pfp.bin.ihex | -rw-r--r-- | 9.1 KB |
| RV770_me.bin.ihex | -rw-r--r-- | 14.6 KB |
| RV770_pfp.bin.ihex | -rw-r--r-- | 9.1 KB |
Computing file changes ...
