diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2017-10-04 10:50:37 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-12-20 10:05:01 +0100 |
| commit | a114af87c0ba390b0146411f89a2a953ffe3c31f (patch) | |
| tree | 7d66e5a90a72afdf99d8f63bc887b17dd45f4cdc /lib/lzo/lzo1x_compress.c | |
| parent | 798f085014243bf3239130889f69bb18a71e5a3e (diff) | |
| download | linux-stable-a114af87c0ba390b0146411f89a2a953ffe3c31f.tar.gz linux-stable-a114af87c0ba390b0146411f89a2a953ffe3c31f.tar.bz2 linux-stable-a114af87c0ba390b0146411f89a2a953ffe3c31f.zip | |
scsi: bfa: integer overflow in debugfs
[ Upstream commit 3e351275655d3c84dc28abf170def9786db5176d ]
We could allocate less memory than intended because we do:
bfad->regdata = kzalloc(len << 2, GFP_KERNEL);
The shift can overflow leading to a crash. This is debugfs code so the
impact is very small. I fixed the network version of this in March with
commit 13e2d5187f6b ("bna: integer overflow bug in debugfs").
Fixes: ab2a9ba189e8 ("[SCSI] bfa: add debugfs support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'lib/lzo/lzo1x_compress.c')
0 files changed, 0 insertions, 0 deletions