git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 256a816) | patch
Staging: vt6655: fix possible Read buffer overflow
authorRoel Kluin <roel.kluin@gmail.com>
Fri, 7 Aug 2009 22:35:31 +0000 (00:35 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 15 Sep 2009 19:02:09 +0000 (12:02 -0700)
commit03cd7136d68b4877a9e1793d31cab38fdcb67434
treedb3e47648bd9ef6492d47e0630ccc639827905b2tree | snapshot
parent256a816b6b78bf29fba0c0f1bbcf998953429422commit | diff
Staging: vt6655: fix possible Read buffer overflow

If pDevice->sOpts.nRxDescs{0,1} or nTxDescs[{0,1}] is zero, the loop ends with
i == 0, and we write aRD{0,1}Ring[-1]. apTD{0,1}Rings[-1] respectively.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/staging/vt6655/device_main.c diff | blob | history
Pandora Kernel Repository