Skip to main content

Browse the archive

Revision ed87c2b2e7dd34016017af183b8f3fbe28179bc1 authored by Dan Carpenter on 19 September 2014, 10:43:11 UTC, committed by Greg Kroah-Hartman on 19 September 2014, 22:32:20 UTC 
staging: vt6655: buffer overflow in ioctl
 
->u.generic_elem.len is a user controlled number between 0-255.  We
should limit it to avoid memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 922b83b
History
File Mode Size
altera.h -rw-r--r-- 1.4 KB
back to top