tree fbee1de66a2ee35d637cb7b27718c608e5c97caf
parent 68905a14e49c97bf49dacd753e40ddd5b254e2ad
author Jes Sorensen <Jes.Sorensen@redhat.com> 1434460413 -0400
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1434490599 -0700

staging: unisys: visorchannel_write() fix potential memory corruption

This fixes the memory corruption case, if nbytes is less than offset
and sizeof(struct channel_header)

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jes Sorensen <Jes.Sorensen@redhat.com>
Signed-off-by: Benjamin Romer <benjamin.romer@unisys.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>