git.openpandora.org
/
pandora-kernel.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
0c0db03
)
[S390] keyboard: integer underflow bug
author
Dan Carpenter
<error27@gmail.com>
Thu, 3 Mar 2011 16:56:06 +0000
(17:56 +0100)
committer
Martin Schwidefsky
<sky@mschwide.boeblingen.de.ibm.com>
Thu, 3 Mar 2011 16:56:14 +0000
(17:56 +0100)
The "ct" variable should be an unsigned int. Both struct kbdiacrs
->kb_cnt and struct kbd_data ->accent_table_size are unsigned ints.
Making it signed causes a problem in KBDIACRUC because the user could
set the signed bit and cause a buffer overflow.
Cc: <stable@kernel.org>
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
No differences found