diff options
| author |   Wenliang Fan <fanwlexca@gmail.com> | 2013-12-17 11:25:28 +0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2013-12-19 15:02:14 -0500 |
| commit | e9db5c21d3646a6454fcd04938dd215ac3ab620a (patch) | |
| tree | 52bc7616461aff96f0a889317b2861ec8d301eab /drivers/net/hamradio/yam.c | |
| parent | xen-netback: fix some error return code (diff) | |
| download | linux-dev-e9db5c21d3646a6454fcd04938dd215ac3ab620a.tar.xz linux-dev-e9db5c21d3646a6454fcd04938dd215ac3ab620a.zip | |
drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl()
The local variable 'bi' comes from userspace. If userspace passed a
large number to 'bi.data.calibrate', there would be an integer overflow
in the following line:
s->hdlctx.calibrate = bi.data.calibrate * s->par.bitrate / 16;
Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions