| commit | 893134b084e137b92476ec11ce90790b5f568bb9 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Tue Feb 04 01:38:03 2014 +0300 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Fri Feb 07 11:10:08 2014 -0800 |
| tree | af32cd7e58f012d65e84a92ca2be5620eacec606 | |
| parent | 08951f10ae146d0c4114ac508310ad316b6f8798 [diff] |
staging: r8188eu: array overflow in rtw_mp_ioctl_hdl() MAX_MP_IOCTL_SUBCODE (35) and mp_ioctl_hdl (32 elements) are no longer in sync. It leads to a bogus pointer dereference. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Larry Finger <Larry.Finger@lwfinger.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>