| commit | 5ac5bd8754b3dabcf4aea7b5f4a28a1d8494a1b0 | [log] [tgz] |
|---|---|---|
| author | Kevin McKinney <klmckinney1@gmail.com> | Sun Sep 18 18:34:46 2011 -0400 |
| committer | Greg Kroah-Hartman <gregkh@suse.de> | Mon Sep 19 10:46:17 2011 -0700 |
| tree | 06f2a5c39a9158f62c9cf78addb4269cd2c8e54f | |
| parent | 7518b9b8fc72a6c0ba67f33bdd4689c7dd28686a [diff] |
Staging: bcm: Add size minimum size restrictions for IOCTL_IDLE_REQ If IoBuffer.InputLength is zero then this will cause an Oops when we dereference the ZERO_SIZE_PTR. Or if it's smaller than sizeof(struct link_request) then we would get memory corruption when we set ->PLength in CopyBufferToControlPacket(). Signed-off-by: Kevin McKinney <klmckinney1@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>