]> git.baikalelectronics.ru Git - kernel.git/commit
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 3 Feb 2014 22:38:03 +0000 (01:38 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 7 Feb 2014 19:10:08 +0000 (11:10 -0800)
commit1e5da8d475418d6914edb9dac5e700a5bb440ede
treeaf32cd7e58f012d65e84a92ca2be5620eacec606
parent730d9c3d0462dfdaa5b4bbf25f75e105ed34193d
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl()

MAX_MP_IOCTL_SUBCODE (35) and mp_ioctl_hdl (32 elements) are no longer
in sync.  It leads to a bogus pointer dereference.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8188eu/os_dep/ioctl_linux.c