git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 551d6fe) | patch
rndis_wlan: prevent integer overflow in indication()
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 29 Feb 2012 06:37:53 +0000 (09:37 +0300)
committerJohn W. Linville <linville@tuxdriver.com>
Mon, 5 Mar 2012 20:23:16 +0000 (15:23 -0500)
commite4e02da2ef01deb36aa80fce6ee0bc3e9725ffe8
tree5ac64bf2c118cd9d9cb98bbd726e763ab70abd2atree | snapshot
parent551d6fe6cb67ea6f7ca4425a5085b05d34f39730commit | diff
rndis_wlan: prevent integer overflow in indication()

If we pick a high value for "offset" then it could lead to an integer
overflow and we would get past the check for:
if (offset + len > buflen) { ...

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/rndis_wlan.c diff | blob | history
Pandora Kernel Repository