projects / profile / ivi / kernel-x86-ivi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 08951f1) | patch
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 3 Feb 2014 22:38:03 +0000 (01:38 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 7 Feb 2014 19:10:08 +0000 (11:10 -0800)
commit893134b084e137b92476ec11ce90790b5f568bb9
treeaf32cd7e58f012d65e84a92ca2be5620eacec606tree | snapshot
parent08951f10ae146d0c4114ac508310ad316b6f8798commit | diff
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl()

MAX_MP_IOCTL_SUBCODE (35) and mp_ioctl_hdl (32 elements) are no longer
in sync.  It leads to a bogus pointer dereference.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8188eu/os_dep/ioctl_linux.c diff | blob | history
Domain: System / Uncategorized;