summaryrefslogtreecommitdiffstats
path: root/arch/parisc/kernel/hpmc.S
diff options
context:
space:
mode:
authorChen Gang <gang.chen@asianux.com>2013-05-27 04:57:09 +0000
committerHelge Deller <deller@gmx.de>2013-06-01 14:27:56 +0200
commit3f108de96ba449a8df3d7e3c053bf890fee2cb95 (patch)
treefcd442cb11a9110e16293457d9e5ac7de433c2e3 /arch/parisc/kernel/hpmc.S
parent0f7dafd44e2de131f67fca87378e30ca86bc00d5 (diff)
downloadlinux-stable-3f108de96ba449a8df3d7e3c053bf890fee2cb95.tar.gz
linux-stable-3f108de96ba449a8df3d7e3c053bf890fee2cb95.tar.bz2
linux-stable-3f108de96ba449a8df3d7e3c053bf890fee2cb95.zip
parisc: memory overflow, 'name' length is too short for using
'path.bc[i]' can be asigned by PCI_SLOT() which can '> 10', so sizeof(6 * "%u:" + "%u" + '\0') may be 21. Since 'name' length is 20, it may be memory overflow. And 'path.bc[i]' is 'unsigned char' for printing, we can be sure the max length of 'name' must be less than 28. So simplify thinking, we can use 28 instead of 20 directly, and do not think of whether 'patchc.bc[i]' can '> 100'. Signed-off-by: Chen Gang <gang.chen@asianux.com> Signed-off-by: Helge Deller <deller@gmx.de>
Diffstat (limited to 'arch/parisc/kernel/hpmc.S')
0 files changed, 0 insertions, 0 deletions