UbiquitousOS
/
OpenCloudOS-Kernel
mirror of https://gitee.com/OpenCloudOS/OpenCloudOS-Kernel.git
11
0
Fork 0
Code Issues Projects Releases Wiki Activity

Staging: gdm72xx: underflow bug in gdm_wimax_ioctl_get_data() 

"size" here should be unsigned, otherwise we might end up trying to copy
negative bytes in gdm_wimax_ioctl_get_data() resulting in an information
leak.

Reported-by: Alan Cox <gnomes@lxorguk.ukuu.org.uk>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
Dan Carpenter 2016-02-22 22:33:09 +03:00 committed by Greg Kroah-Hartman
parent deb0b53bb5
commit e0aa762cac
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
drivers/staging/gdm72xx/wm_ioctl.h
View File

@ -74,12 +74,12 @@ struct fsm_s {
};
struct data_s {
int size;
unsigned int size;
void *buf;
};
struct udata_s {
int size;
unsigned int size;
void __user *buf;
};