From: Roel Kluin Date: Tue, 22 Sep 2009 23:43:28 +0000 (-0700) Subject: smbfs: read buffer overflow X-Git-Tag: v2.6.32-rc1~408 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ca976c53de0c33160083d36f70bd18d7970f6969;p=pandora-kernel.git smbfs: read buffer overflow This function uses signed integers for the unix_date and local variables - if a negative number is supplied and the leap-year condition is not met, month will be 0, leading to a read of day_n[-1] Signed-off-by: Roel Kluin Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds --- Reading git-diff-tree failed