Files
linux/drivers
Xi Wang 2a58b19fd9 staging: vt6655: integer overflows in private_ioctl()
There are two potential integer overflows in private_ioctl() if
userspace passes in a large sList.uItem / sNodeList.uItem.  The
subsequent call to kmalloc() would allocate a small buffer, leading
to a memory corruption.

Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-11-30 19:29:40 +09:00
..
2011-11-17 02:11:42 -05:00
2011-11-23 11:33:07 +01:00
2011-11-08 17:11:57 +01:00
2011-11-14 10:47:01 -06:00
2011-10-31 19:31:57 -04:00