diff options
| author | Wenliang Fan <fanwlexca@gmail.com> | 2013-12-20 19:07:38 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2013-12-20 12:22:26 -0800 |
| commit | 1b1290e5bac8791cf613ead70dab54d06f1e8489 (patch) | |
| tree | 57c7f2b2ba470252a97acb203e3c3ec621b99506 /drivers/staging/rtl8188eu | |
| parent | 01b6442b4639a0165880aefeec5342df37e02aa8 (diff) | |
drivers/staging/bcm: Integer overflow
The checking condition in 'validateFlash2xReadWrite()' is not
sufficient. A large number invalid would cause an integer overflow and
pass the condition, which could cause further integer overflows in
'Bcmchar.c:bcm_char_ioctl()'.
Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/staging/rtl8188eu')
0 files changed, 0 insertions, 0 deletions