tree 59704e6d69bf4358832d2b6fad9cc7f35d8c5a8a
parent 41c7b7c0fa2f68afb1154e88597ff6b9b97334cf
author Kevin McKinney <klmckinney1@gmail.com> 1320809615 -0500
committer Greg Kroah-Hartman <gregkh@suse.de> 1322356413 -0800

Staging: bcm: Clean up code in ioctl: IOCTL_BCM_EEPROM_REGISTER_READ

This patch verifies two conditions before executing
a kmalloc call. First, it checks to see that
IoBuffer.OutputLength is not greater than an
unsigned short. If so, an invalid value may be
returned. The second change is a check to make
sure IoBuffer.OutputLength is not equal to
zero. Which simply keeps this code inline with
the other ioctl, IOCTL_BCM_REGISTER_READ_PRIVATE.

Signed-off-by: Kevin McKinney <klmckinney1@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>