staging: unisys: visorchannel_write() fix potential memory corruption
authorJes Sorensen <Jes.Sorensen@redhat.com>
Tue, 16 Jun 2015 13:13:33 +0000 (09:13 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 16 Jun 2015 21:36:39 +0000 (14:36 -0700)
commit56df900cb44d18c3ffaf16e09b83aaf37d912cc5
treefbee1de66a2ee35d637cb7b27718c608e5c97caf
parent68905a14e49c97bf49dacd753e40ddd5b254e2ad
staging: unisys: visorchannel_write() fix potential memory corruption

This fixes the memory corruption case, if nbytes is less than offset
and sizeof(struct channel_header)

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jes Sorensen <Jes.Sorensen@redhat.com>
Signed-off-by: Benjamin Romer <benjamin.romer@unisys.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/unisys/visorbus/visorchannel.c