| commit | dd6a19a57d7247ed62e6445f489dad501b64af03 | |
| author | Dan Carpenter <error27@gmail.com> | |
| Fri, 7 Jan 2011 19:41:54 +0000 (7 16:41 -0300) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Wed, 2 Mar 2011 14:46:37 +0000 (2 09:46 -0500) | ||
| tree | 90285d6e89a7da1bac96cd8a5ef320ec18a6d17e | treesnapshot (tar.gz zip) |
| parent | 595b62a8acfb289a5d2fcc70464ba0995b55fdd7 | commitdiff |
av7110: check for negative array offset
commit cb26a24ee9706473f31d34cc259f4dcf45cd0644 upstream.
info->num comes from the user. It's type int. If the user passes
in a negative value that would cause memory corruption.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit cb26a24ee9706473f31d34cc259f4dcf45cd0644 upstream.
info->num comes from the user. It's type int. If the user passes
in a negative value that would cause memory corruption.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| drivers/media/dvb/ttpci/av7110_ca.c | diffblobblamehistory |