diff options
| author | Roel Kluin <roel.kluin@gmail.com> | 2009-09-21 17:03:54 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2009-09-22 07:17:42 -0700 |
| commit | 470967dc6c38696f853b7f338eb9d743c28a9e11 (patch) | |
| tree | 9dac40e966a5bb4a902f9cdb8ea0701fe964b85f /drivers/pcmcia/pcmcia_ioctl.c | |
| parent | 734f3fa18d460995c8621cf2331b7fba88c977ce (diff) | |
| download | op-kernel-dev-470967dc6c38696f853b7f338eb9d743c28a9e11.zip op-kernel-dev-470967dc6c38696f853b7f338eb9d743c28a9e11.tar.gz | |
pcmcia: fix read buffer overflow
If count > 0 and dev->rlen == dev->rpos and dev->proto == 0 then we read
and write dev->rbuf[-1];
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Cc: Harald Welte <laforge@gnumonks.org>
Cc: Dominik Brodowski <linux@dominikbrodowski.net>
Cc: Greg KH <greg@kroah.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'drivers/pcmcia/pcmcia_ioctl.c')
0 files changed, 0 insertions, 0 deletions
