diff options
| author | Xi Wang <xi.wang@gmail.com> | 2012-04-09 15:48:45 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-04-17 15:54:57 -0700 |
| commit | 8bde9a62ee74afa89f593c563e926d163b1f6ada (patch) | |
| tree | 32b9daa28afaf5b93329ed4a8509602d2b5f6b2a /drivers/mfd/pm8921-core.c | |
| parent | e65cdfae71cecec0fcd43a3f9ac8b5e4ae52db08 (diff) | |
| download | linux-8bde9a62ee74afa89f593c563e926d163b1f6ada.tar.gz linux-8bde9a62ee74afa89f593c563e926d163b1f6ada.tar.bz2 linux-8bde9a62ee74afa89f593c563e926d163b1f6ada.zip | |
usb: usbtest: avoid integer overflow in alloc_sglist()
A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.
| alloc_sglist()
| usbtest_ioctl()
Use kmalloc_array() to avoid the overflow.
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/mfd/pm8921-core.c')
0 files changed, 0 insertions, 0 deletions