diff options
| author | Wenliang Fan <fanwlexca@gmail.com> | 2013-12-18 13:56:12 +0800 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2014-01-03 15:36:56 -0500 |
| commit | 1558efd0d48671845d2bd9ad80ba042577afd578 (patch) | |
| tree | 08b013dced0bfc309a356cc32e9ae078ea928753 /drivers/net/wireless/ath/ath9k/spectral.c | |
| parent | c3c5bb31ea046721bc5fe3e54b45c7a13677f398 (diff) | |
| download | op-kernel-dev-1558efd0d48671845d2bd9ad80ba042577afd578.zip op-kernel-dev-1558efd0d48671845d2bd9ad80ba042577afd578.tar.gz | |
drivers/net/wireless/hostap: Integer overflow
The local variable 'value' comes from 'extra', a parameter of function
'prism2_ioctl_priv_prism2_param'. If a large number passed to 'value',
there would be an integer overflow in the following line:
local->passive_scan_timer.expires = jiffies +
local->passive_scan_interval * HZ
Signed-off-by: Wenliang Fan <fanwlexca@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/ath/ath9k/spectral.c')
0 files changed, 0 insertions, 0 deletions
