From: Wenliang Fan <fanwlexca@gmail.com>
Date: Fri, 20 Dec 2013 11:07:38 +0000 (+0800)
Subject: drivers/staging/bcm: Integer overflow
X-Git-Tag: v3.14-rc1~150^2~168
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1b1290e5bac8791cf613ead70dab54d06f1e8489;p=pandora-kernel.git

drivers/staging/bcm: Integer overflow

The checking condition in 'validateFlash2xReadWrite()' is not
sufficient. A large number invalid would cause an integer overflow and
pass the condition, which could cause further integer overflows in
'Bcmchar.c:bcm_char_ioctl()'.

Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

Reading git-diff-tree failed