]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b7a235d) | patch
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 3 Feb 2014 22:38:03 +0000 (01:38 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 7 Feb 2014 19:10:08 +0000 (11:10 -0800)
commit58d32a0fb164248b1918e5af53d79f17736c97a8
treeaf32cd7e58f012d65e84a92ca2be5620eacec606tree | snapshot
parentb7a235d9f4bf3e25bdc6cd4549eb5475b1163887commit | diff
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl()

MAX_MP_IOCTL_SUBCODE (35) and mp_ioctl_hdl (32 elements) are no longer
in sync.  It leads to a bogus pointer dereference.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8188eu/os_dep/ioctl_linux.c diff | blob | history
Linux Kernel Source Tree.