tree 8e74932054e9f9f9ab87642def51deb45e2dab9a
parent 3c92e38dc4d803a7f90a08277a9d59f920963e0c
author Kevin McKinney <klmckinney1@gmail.com> 1324395673 -0500
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1328750343 -0800

Staging: bcm: Fix an integer overflow in IOCTL_BCM_NVM_READ/WRITE

Variables stNVMReadWrite.uioffset and stNVMReadWrite.uiNumBytes
are chosen from userspace and can be very high. The sum of
these two digits would result in a small number. Therefore,
this patch verifies a negative number was not entered, and
reorganizes the equation to remove the integer overflow.

Signed-off-by: Kevin McKinney <klmckinney1@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>