Xi Wang
201320435d
staging: vt6656: integer overflows in private_ioctl()
...
There are two potential integer overflows in private_ioctl() if
userspace passes in a large sList.uItem / sNodeList.uItem. The
subsequent call to kmalloc() would allocate a small buffer, leading
to a memory corruption.
Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-11-30 19:29:40 +09:00
..
2011-11-30 19:28:18 +09:00
2010-08-31 11:14:39 -07:00
2010-06-18 10:37:48 -07:00
2011-11-30 19:28:18 +09:00
2010-06-18 10:35:33 -07:00
2011-11-30 19:28:18 +09:00
2010-08-02 18:16:27 -07:00
2011-11-30 19:28:19 +09:00
2011-11-30 19:28:19 +09:00
2010-09-16 12:37:35 -07:00
2010-06-18 10:35:33 -07:00
2010-08-02 18:19:04 -07:00
2010-06-18 10:35:33 -07:00
2010-07-22 11:42:00 -07:00
2010-05-18 14:51:08 -07:00
2010-06-18 10:35:33 -07:00
2010-06-18 10:35:33 -07:00
2011-01-21 12:19:11 -08:00
2011-08-23 14:36:18 -07:00
2010-05-18 14:51:08 -07:00
2011-03-14 11:57:37 -07:00
2011-03-14 11:57:37 -07:00
2010-08-02 18:19:04 -07:00
2010-08-02 18:19:04 -07:00
2010-09-16 13:02:36 -07:00
2011-11-30 19:29:40 +09:00
2010-05-18 14:51:08 -07:00
2010-06-18 10:35:33 -07:00
2011-11-30 19:25:50 +09:00
2011-11-30 19:25:50 +09:00
2011-04-04 21:33:26 -07:00
2010-08-31 11:35:06 -07:00
2010-05-18 14:51:08 -07:00
2010-09-16 12:37:35 -07:00
2010-06-18 10:35:33 -07:00
2011-11-30 19:28:18 +09:00
2010-10-05 11:56:38 -07:00
2010-08-02 18:19:04 -07:00
2010-08-02 18:19:04 -07:00
2010-06-18 10:34:59 -07:00
2010-06-18 10:35:33 -07:00
2011-03-02 15:52:30 -05:00
2010-06-18 10:42:07 -07:00
2010-05-18 14:51:08 -07:00
2010-05-18 14:51:08 -07:00
2010-05-18 14:51:08 -07:00
2010-06-18 10:35:33 -07:00
2010-06-18 10:35:33 -07:00
2011-04-25 16:58:34 -07:00
2010-08-02 18:19:04 -07:00
2010-05-18 14:51:08 -07:00
2010-05-18 14:51:08 -07:00
2010-05-18 14:51:08 -07:00
2010-08-31 11:31:25 -07:00
2010-11-09 15:55:54 -08:00
2010-08-02 18:16:27 -07:00
2010-05-18 14:51:08 -07:00
2010-08-31 11:31:26 -07:00
2010-08-02 18:19:04 -07:00
2011-04-25 16:58:34 -07:00
2010-07-08 13:01:05 -07:00
2010-06-24 14:15:07 -07:00
2010-05-18 14:51:08 -07:00
2011-08-23 14:36:18 -07:00
2011-03-31 11:26:23 -03:00
2010-11-16 12:06:47 -08:00
2010-06-18 10:35:33 -07:00
2010-08-31 11:35:05 -07:00
2011-09-29 17:34:50 -07:00
2010-05-18 14:51:08 -07:00