Skip to main content

Browse the archive

Revision ed87c2b2e7dd34016017af183b8f3fbe28179bc1 authored by Dan Carpenter on 19 September 2014, 10:43:11 UTC, committed by Greg Kroah-Hartman on 19 September 2014, 22:32:20 UTC 
staging: vt6655: buffer overflow in ioctl
 
->u.generic_elem.len is a user controlled number between 0-255.  We
should limit it to avoid memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 922b83b
History
File Mode Size
double.h -rw-r--r-- 6.2 KB
op-1.h -rw-r--r-- 9.2 KB
op-2.h -rw-r--r-- 19.5 KB
op-4.h -rw-r--r-- 23.2 KB
op-8.h -rw-r--r-- 3.8 KB
op-common.h -rw-r--r-- 26.0 KB
quad.h -rw-r--r-- 6.5 KB
single.h -rw-r--r-- 3.8 KB
soft-fp.h -rw-r--r-- 5.1 KB
back to top