Staging: bcm: Add size minimum size restrictions for IOCTL_IDLE_REQ

Browse source

If IoBuffer.InputLength is zero then this will cause an Oops when
we dereference the ZERO_SIZE_PTR.  Or if it's smaller than
sizeof(struct link_request) then we would get memory corruption
when we set ->PLength in CopyBufferToControlPacket().

Signed-off-by: Kevin McKinney <klmckinney1@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

...

This commit is contained in:

Kevin McKinney 2011-09-18 18:34:46 -04:00 • committed by Greg Kroah-Hartman

parent 7518b9b8fc

commit 5ac5bd8754

1 changed files with 3 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

drivers/staging/bcm/Bcmchar.c

View file