From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Fri, 29 Aug 2014 08:42:56 +0000 (+0300)
Subject: VMCI: integer overflow in vmci_datagram_dispatch()
X-Git-Tag: fixes-for-v3.18-merge-window~11^2~29
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2e45354645f77e83fe3832f150acdcfeff45f44c;p=pandora-kernel.git

VMCI: integer overflow in vmci_datagram_dispatch()

This is untrusted user data from vmci_host_do_send_datagram() so the
VMCI_DG_SIZE() macro can have an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

Reading git-diff-tree failed