Chen Gang f39479363e drivers/isdn: checkng length to be sure not memory overflow ... sizeof (cmd.parm.cmsg.para) is 50 (MAX_CAPI_PARA_LEN). sizeof (cmd.parm) is 80+, but less than 100. strlen(msg) may be more than 80+ (Modem-Commandbuffer, less than 255). isdn_tty_send_msg is called by isdn_tty_parse_at the relative parameter is m->mdmcmd (atemu *m) the relative command may be "+M..." so need check the length to be sure not memory overflow. cmd.parm is a union, and need keep original valid buffer length no touch Signed-off-by: Chen Gang <gang.chen@asianux.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-03-08 00:35:44 -05:00
..
isdn_audio.c
isdn_audio.h
isdn_bsdcomp.c
isdn_common.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-02-26 20:16:07 -08:00
isdn_common.h
isdn_concap.c
isdn_concap.h
isdn_net.c
isdn_net.h
isdn_ppp.c
isdn_ppp.h
isdn_tty.c	drivers/isdn: checkng length to be sure not memory overflow	2013-03-08 00:35:44 -05:00
isdn_tty.h
isdn_ttyfax.c
isdn_ttyfax.h
isdn_v110.c
isdn_v110.h
isdn_x25iface.c
isdn_x25iface.h
isdnhdlc.c
Kconfig
Makefile