diff options
| author | Dan Carpenter <[email protected]> | 2012-05-18 10:36:47 +0300 |
|---|---|---|
| committer | John W. Linville <[email protected]> | 2012-05-25 11:16:16 -0400 |
| commit | 885ba1da689299ec52e646ca1a2429b8de55f364 (patch) | |
| tree | 14cda3eb36796e77510994306c73197f47a5ff16 /net/lapb/lapb_out.c | |
| parent | f380f2c4a12e913356bd49f8790ec1063c4fe9f8 (diff) | |
NFC: potential integer overflow problem in check_crc()
If "buf[0]" is 255 then "len" gets set to 0. The call to
"crc_ccitt(0xffff, buf, len - 2);" casts the "len - 2" to a high
positive number which is ugly.
Signed-off-by: Dan Carpenter <[email protected]>
Signed-off-by: John W. Linville <[email protected]>
Diffstat (limited to 'net/lapb/lapb_out.c')
0 files changed, 0 insertions, 0 deletions