diff options
| author |   Xi Wang <xi.wang@gmail.com> | 2012-04-09 15:48:45 -0400 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-04-17 15:54:57 -0700 |
| commit | 8bde9a62ee74afa89f593c563e926d163b1f6ada (patch) | |
| tree | 32b9daa28afaf5b93329ed4a8509602d2b5f6b2a /tools/perf/scripts/python/syscall-counts.py | |
| parent | usb: usbtest: avoid integer overflow in test_ctrl_queue() (diff) | |
| download | linux-dev-8bde9a62ee74afa89f593c563e926d163b1f6ada.tar.xz linux-dev-8bde9a62ee74afa89f593c563e926d163b1f6ada.zip | |
usb: usbtest: avoid integer overflow in alloc_sglist()
A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.
| alloc_sglist()
| usbtest_ioctl()
Use kmalloc_array() to avoid the overflow.
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/perf/scripts/python/syscall-counts.py')
0 files changed, 0 insertions, 0 deletions