diff options
| author | roel kluin <[email protected]> | 2009-07-29 03:18:56 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2009-07-30 13:27:34 -0700 |
| commit | f0c5b35c6c93c89a9d8ccab19b0b4842f5dfddc5 (patch) | |
| tree | 435e5f63d7f6dc4f822af6e5d3cca35e0218984b /net/lapb/lapb_iface.c | |
| parent | a3e8ee682003685b8b9c98c89340a42e48c3e813 (diff) | |
eexpress: Read buffer overflow
start_code is 69 words, but the code always writes a multiple of 16 words,
so the last 11 words written are outside the array.
Signed-off-by: Roel Kluin <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/lapb/lapb_iface.c')
0 files changed, 0 insertions, 0 deletions