| commit | e4e02da2ef01deb36aa80fce6ee0bc3e9725ffe8 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Wed Feb 29 09:37:53 2012 +0300 |
| committer | John W. Linville <linville@tuxdriver.com> | Mon Mar 05 15:23:16 2012 -0500 |
| tree | 5ac64bf2c118cd9d9cb98bbd726e763ab70abd2a | |
| parent | 551d6fe6cb67ea6f7ca4425a5085b05d34f39730 [diff] |
rndis_wlan: prevent integer overflow in indication()
If we pick a high value for "offset" then it could lead to an integer
overflow and we would get past the check for:
if (offset + len > buflen) { ...
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>