From: Wenliang Fan Date: Wed, 18 Dec 2013 05:56:12 +0000 (+0800) Subject: drivers/net/wireless/hostap: Integer overflow X-Git-Tag: v3.14-rc1~94^2~238^2^2~82 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1558efd0d48671845d2bd9ad80ba042577afd578;p=pandora-kernel.git drivers/net/wireless/hostap: Integer overflow The local variable 'value' comes from 'extra', a parameter of function 'prism2_ioctl_priv_prism2_param'. If a large number passed to 'value', there would be an integer overflow in the following line: local->passive_scan_timer.expires = jiffies + local->passive_scan_interval * HZ Signed-off-by: Wenliang Fan Signed-off-by: John W. Linville --- Reading git-diff-tree failed