projects / platform / adaptation / renesas_rcar / renesas_kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 01b6442) | patch
drivers/staging/bcm: Integer overflow
authorWenliang Fan <fanwlexca@gmail.com>
Fri, 20 Dec 2013 11:07:38 +0000 (19:07 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 20 Dec 2013 20:22:26 +0000 (12:22 -0800)
commit1b1290e5bac8791cf613ead70dab54d06f1e8489
tree57c7f2b2ba470252a97acb203e3c3ec621b99506tree | snapshot
parent01b6442b4639a0165880aefeec5342df37e02aa8commit | diff
drivers/staging/bcm: Integer overflow

The checking condition in 'validateFlash2xReadWrite()' is not
sufficient. A large number invalid would cause an integer overflow and
pass the condition, which could cause further integer overflows in
'Bcmchar.c:bcm_char_ioctl()'.

Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/bcm/nvm.c diff | blob | history
Domain: System / Uncategorized;