| commit | 8bde9a62ee74afa89f593c563e926d163b1f6ada | [log] [tgz] |
|---|---|---|
| author | Xi Wang <xi.wang@gmail.com> | Mon Apr 09 15:48:45 2012 -0400 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Tue Apr 17 15:54:57 2012 -0700 |
| tree | 32b9daa28afaf5b93329ed4a8509602d2b5f6b2a | |
| parent | e65cdfae71cecec0fcd43a3f9ac8b5e4ae52db08 [diff] |
usb: usbtest: avoid integer overflow in alloc_sglist() A large `nents' from userspace could overflow the allocation size, leading to memory corruption. | alloc_sglist() | usbtest_ioctl() Use kmalloc_array() to avoid the overflow. Signed-off-by: Xi Wang <xi.wang@gmail.com> Acked-by: Alan Stern <stern@rowland.harvard.edu> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>