diff options
author | Dennis Dalessandro <[email protected]> | 2014-02-20 11:02:53 -0500 |
---|---|---|
committer | Roland Dreier <[email protected]> | 2014-03-17 16:16:51 -0700 |
commit | a2cb0eb8a64adb29a99fd864013de957028f36ae (patch) | |
tree | 29398a975c31580c9c545df3e8081e566e49f46b /scripts/gdb/linux | |
parent | 1c20c81909455f64f2df6107cb099ee5569d9f62 (diff) |
IB/ipath: Fix potential buffer overrun in sending diag packet routine
Guard against a potential buffer overrun. The size to read from the
user is passed in, and due to the padding that needs to be taken into
account, as well as the place holder for the ICRC it is possible to
overflow the 32bit value which would cause more data to be copied from
user space than is allocated in the buffer.
Cc: <[email protected]>
Reported-by: Nico Golde <[email protected]>
Reported-by: Fabian Yamaguchi <[email protected]>
Reviewed-by: Mike Marciniszyn <[email protected]>
Signed-off-by: Dennis Dalessandro <[email protected]>
Signed-off-by: Roland Dreier <[email protected]>
Diffstat (limited to 'scripts/gdb/linux')
0 files changed, 0 insertions, 0 deletions