]> www.infradead.org Git - users/jedix/linux-maple.git/commit
projects / users / jedix / linux-maple.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 0e53730) | patch
xen-gntdev: integer overflow in gntdev_alloc_map()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 4 Nov 2011 18:23:32 +0000 (21:23 +0300)
committerKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Tue, 15 Nov 2011 16:09:38 +0000 (11:09 -0500)
commitd4f6b6aab8b68783a37092058914a3a3d9de32e4
treeb072b068fd890e42e5d4c3f480bd1a8aaa84acedtree
parent0e53730224ce0091d76b69ba712a71561ab63ce2commit | diff
xen-gntdev: integer overflow in gntdev_alloc_map()

The multiplications here can overflow resulting in smaller buffer
sizes than expected.  "count" comes from a copy_from_user().

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
drivers/xen/gntdev.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.