| commit | cedb14039c279adef0b250a636da323ac904f1df | |
| author | Samuel Ortiz <samuel@sortiz.org> | |
| Tue, 5 Oct 2010 23:03:12 +0000 (6 01:03 +0200) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Mon, 21 Mar 2011 19:43:41 +0000 (21 12:43 -0700) | ||
| tree | 9c20b6d2a8312a677e0e432828e6365fce1f3d28 | treesnapshot (tar.gz zip) |
| parent | a2014bf8aa1568b2a4e77a1ed38370f8c80cb89d | commitdiff |
irda: Fix heap memory corruption in iriap.c
commit 37f9fc452d138dfc4da2ee1ce5ae85094efc3606 upstream.
While parsing the GetValuebyClass command frame, we could potentially write
passed the skb->data pointer.
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Samuel Ortiz <samuel@sortiz.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit 37f9fc452d138dfc4da2ee1ce5ae85094efc3606 upstream.
While parsing the GetValuebyClass command frame, we could potentially write
passed the skb->data pointer.
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Samuel Ortiz <samuel@sortiz.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| net/irda/iriap.c | diffblobblamehistory |