From: Kevin McKinney <klmckinney1@gmail.com>
Date: Tue, 20 Dec 2011 15:41:13 +0000 (-0500)
Subject: Staging: bcm: Fix an integer overflow in IOCTL_BCM_NVM_READ/WRITE
X-Git-Tag: v3.4-rc1~186^2~176^2~114
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b71dbbcfaa2a2965e0797db7333396a71062a341;p=pandora-kernel.git

Staging: bcm: Fix an integer overflow in IOCTL_BCM_NVM_READ/WRITE

Variables stNVMReadWrite.uioffset and stNVMReadWrite.uiNumBytes
are chosen from userspace and can be very high. The sum of
these two digits would result in a small number. Therefore,
this patch verifies a negative number was not entered, and
reorganizes the equation to remove the integer overflow.

Signed-off-by: Kevin McKinney <klmckinney1@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

Reading git-diff-tree failed