| commit | 03cd7136d68b4877a9e1793d31cab38fdcb67434 | |
| author | Roel Kluin <roel.kluin@gmail.com> | |
| Fri, 7 Aug 2009 22:35:31 +0000 (8 00:35 +0200) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Tue, 15 Sep 2009 19:02:09 +0000 (15 12:02 -0700) | ||
| tree | db3e47648bd9ef6492d47e0630ccc639827905b2 | treesnapshot (tar.gz zip) |
| parent | 256a816b6b78bf29fba0c0f1bbcf998953429422 | commitdiff |
Staging: vt6655: fix possible Read buffer overflow
If pDevice->sOpts.nRxDescs{0,1} or nTxDescs[{0,1}] is zero, the loop ends with
i == 0, and we write aRD{0,1}Ring[-1]. apTD{0,1}Rings[-1] respectively.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
If pDevice->sOpts.nRxDescs{0,1} or nTxDescs[{0,1}] is zero, the loop ends with
i == 0, and we write aRD{0,1}Ring[-1]. apTD{0,1}Rings[-1] respectively.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| drivers/staging/vt6655/device_main.c | diffblobblamehistory |