]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5677421) | patch
usb: usbtest: avoid integer overflow in alloc_sglist()
authorXi Wang <xi.wang@gmail.com>
Mon, 9 Apr 2012 19:48:45 +0000 (15:48 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 17 Apr 2012 22:54:57 +0000 (15:54 -0700)
commite8d142b2a6e6f6e76fdc412007a5c8d5662bd682
tree32b9daa28afaf5b93329ed4a8509602d2b5f6b2atree | snapshot
parent5677421e724cab8f0b2d7f1f0403c993bba1589dcommit | diff
usb: usbtest: avoid integer overflow in alloc_sglist()

A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.

| alloc_sglist()
| usbtest_ioctl()

Use kmalloc_array() to avoid the overflow.

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/misc/usbtest.c diff | blob | history
Linux Kernel Source Tree.