| commit | 51cb85a88c9588a1725bdb1eccadc2478e68cbad | |
| author | Dan Carpenter <dan.carpenter@oracle.com> | |
| Wed, 29 Feb 2012 21:17:08 +0000 (29 21:17 +0000) | ||
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
| Mon, 21 May 2012 16:40:06 +0000 (21 09:40 -0700) | ||
| tree | d27dab1e600fb4b72c6a2d274bf1af364f638ad0 | treesnapshot (tar.gz zip) |
| parent | 91618d8c36e210e76a01bb2bd22433c74a515449 | commitdiff |
pch_gbe: memory corruption calling pch_gbe_validate_option()
commit 73f98eab9b9e0bab492ca06add5657d9e702ddb1 upstream.
pch_gbe_validate_option() modifies 32 bits of memory but we pass
&hw->phy.autoneg_advertised which only has 16 bits and &hw->mac.fc
which only has 8 bits.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Tomoya MORINAGA <tomoya.rohm@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
commit 73f98eab9b9e0bab492ca06add5657d9e702ddb1 upstream.
pch_gbe_validate_option() modifies 32 bits of memory but we pass
&hw->phy.autoneg_advertised which only has 16 bits and &hw->mac.fc
which only has 8 bits.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Tomoya MORINAGA <tomoya.rohm@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| drivers/net/pch_gbe/pch_gbe_param.c | diffblobblamehistory |