Searched hist:"819 a100846295461bc0f1bfcb8e5ab11c1bc4cdb" (Results 1 – 7 of 7) sorted by relevance
| /openbmc/linux/drivers/isdn/hardware/mISDN/ |
| H A D | w6692.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| H A D | mISDNisar.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| H A D | mISDNipac.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| H A D | avmfritz.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| H A D | netjet.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| H A D | hfcsusb.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| H A D | hfcpci.c | diff 819a100846295461bc0f1bfcb8e5ab11c1bc4cdb Mon Mar 26 16:20:48 CDT 2012 Dan Carpenter <dan.carpenter@oracle.com> mISDN: array underflow in open_bchannel()
There are two channels here. User space starts counting channels at one
but in the kernel we start at zero. If the user passes in a zero
channel that's invalid and could lead to memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|