Searched hist:"8 bde9a62" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/drivers/usb/misc/ |
| H A D | usbtest.c | 8bde9a62 Mon Apr 09 14:48:45 CDT 2012 Xi Wang <xi.wang@gmail.com> usb: usbtest: avoid integer overflow in alloc_sglist()
A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.
| alloc_sglist()
| usbtest_ioctl()
Use kmalloc_array() to avoid the overflow.
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
8bde9a62 Mon Apr 09 14:48:45 CDT 2012 Xi Wang <xi.wang@gmail.com> usb: usbtest: avoid integer overflow in alloc_sglist()
A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.
| alloc_sglist()
| usbtest_ioctl()
Use kmalloc_array() to avoid the overflow.
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|