From: Dan Carpenter Date: Tue, 28 Jul 2015 15:48:21 +0000 (+0300) Subject: Staging: rtl8192e: array overflow in rtl92e_set_swcam() X-Git-Tag: omap-for-v4.3/fixes-merge-window~44^2~289 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d1f0f3118e55ad80136d19dd4afdb32ccba26a42;p=pandora-kernel.git Staging: rtl8192e: array overflow in rtl92e_set_swcam() "EntryNo" is comes from the user in the ioctl and it's a number between 0-255. The ieee->swcamtable[] array only has 32 elements so it can result in memory corruption. Signed-off-by: Dan Carpenter Signed-off-by: Greg Kroah-Hartman --- Reading git-diff-tree failed