diff options
| author | Xi Wang <[email protected]> | 2011-11-29 21:52:46 -0500 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2011-11-30 19:29:40 +0900 |
| commit | 2a58b19fd97c7368c03c027419a2aeb26313adad (patch) | |
| tree | 3f264e57e93835e04d88b19c6207b58048f1db51 /tools/perf/scripts/python/bin | |
| parent | fee6433bdd1a4ab403a79069eda9a38da9903243 (diff) | |
staging: vt6655: integer overflows in private_ioctl()
There are two potential integer overflows in private_ioctl() if
userspace passes in a large sList.uItem / sNodeList.uItem. The
subsequent call to kmalloc() would allocate a small buffer, leading
to a memory corruption.
Reported-by: Dan Rosenberg <[email protected]>
Signed-off-by: Xi Wang <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/bin')
0 files changed, 0 insertions, 0 deletions