diff options
| author | Roel Kluin <[email protected]> | 2009-08-08 00:35:31 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2009-09-15 12:02:09 -0700 |
| commit | 03cd7136d68b4877a9e1793d31cab38fdcb67434 (patch) | |
| tree | db3e47648bd9ef6492d47e0630ccc639827905b2 /scripts/objdiff | |
| parent | 256a816b6b78bf29fba0c0f1bbcf998953429422 (diff) | |
Staging: vt6655: fix possible Read buffer overflow
If pDevice->sOpts.nRxDescs{0,1} or nTxDescs[{0,1}] is zero, the loop ends with
i == 0, and we write aRD{0,1}Ring[-1]. apTD{0,1}Rings[-1] respectively.
Signed-off-by: Roel Kluin <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'scripts/objdiff')
0 files changed, 0 insertions, 0 deletions