| commit | 1b1290e5bac8791cf613ead70dab54d06f1e8489 | [log] [tgz] |
|---|---|---|
| author | Wenliang Fan <fanwlexca@gmail.com> | Fri Dec 20 19:07:38 2013 +0800 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Fri Dec 20 12:22:26 2013 -0800 |
| tree | 57c7f2b2ba470252a97acb203e3c3ec621b99506 | |
| parent | 01b6442b4639a0165880aefeec5342df37e02aa8 [diff] |
drivers/staging/bcm: Integer overflow The checking condition in 'validateFlash2xReadWrite()' is not sufficient. A large number invalid would cause an integer overflow and pass the condition, which could cause further integer overflows in 'Bcmchar.c:bcm_char_ioctl()'. Signed-off-by: Wenliang Fan <fanwlexca@gmail.com> Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>