kernel/relay.c · f6302f1bcd75a042df69866d98b8d775a668f8f1 · Jeny Dhruvit Sheth / linux

Forked from hardware-enablement / Rockchip upstream enablement efforts / linux

Source project has a limited visibility.

13 years ago

relay: prevent integer overflow in relay_open() · f6302f1b

Dan Carpenter authored 13 years ago


"subbuf_size" and "n_subbufs" come from the user and they need to be
capped to prevent an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <axboe@kernel.dk>

f6302f1b

History

relay: prevent integer overflow in relay_open()

Dan Carpenter authored 13 years ago


"subbuf_size" and "n_subbufs" come from the user and they need to be
capped to prevent an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <axboe@kernel.dk>