rndis_wlan: prevent integer overflow in indication()

Browse source

If we pick a high value for "offset" then it could lead to an integer
overflow and we would get past the check for:
	if (offset + len > buflen) { ...

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

...

This commit is contained in:

Dan Carpenter 2012-02-29 09:37:53 +03:00 • committed by John W. Linville

parent 551d6fe6cb

commit e4e02da2ef

1 changed files with 2 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

drivers/net/wireless/rndis_wlan.c

View file