| commit | 1558efd0d48671845d2bd9ad80ba042577afd578 | [log] [tgz] |
|---|---|---|
| author | Wenliang Fan <fanwlexca@gmail.com> | Wed Dec 18 13:56:12 2013 +0800 |
| committer | John W. Linville <linville@tuxdriver.com> | Fri Jan 03 15:36:56 2014 -0500 |
| tree | 08b013dced0bfc309a356cc32e9ae078ea928753 | |
| parent | c3c5bb31ea046721bc5fe3e54b45c7a13677f398 [diff] |
drivers/net/wireless/hostap: Integer overflow The local variable 'value' comes from 'extra', a parameter of function 'prism2_ioctl_priv_prism2_param'. If a large number passed to 'value', there would be an integer overflow in the following line: local->passive_scan_timer.expires = jiffies + local->passive_scan_interval * HZ Signed-off-by: Wenliang Fan <fanwlexca@gmail.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>