diff options
| author | Vasiliy Kulikov <segoon@openwall.com> | 2010-11-26 14:06:35 -0300 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@redhat.com> | 2010-12-29 08:17:02 -0200 |
| commit | 4c8b8698053c986f5f5249878eab70cb028a1023 (patch) | |
| tree | d7e6f5b35bc7b7a2cf9dd26436177f02d6ac2e77 /lib/bcd.c | |
| parent | 87d1a50ce45168cbaec10397e876286a398052c1 (diff) | |
| download | op-kernel-dev-4c8b8698053c986f5f5249878eab70cb028a1023.zip op-kernel-dev-4c8b8698053c986f5f5249878eab70cb028a1023.tar.gz | |
[media] rc: ir-lirc-codec: fix potential integer overflow
'n' may be bigger than MAX_INT*sizeof(int), if so checking of truncated
(int)(n/sizeof(int)) for LIRCBUF_SIZE overflow and then using nontruncated 'count'
doesn't make sense. Also n may be up to sizeof(int)-1 bytes bigger than expected,
so check value of (n % sizeof(int)) too.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Acked-by: Jarod Wilson <jarod@redhat.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'lib/bcd.c')
0 files changed, 0 insertions, 0 deletions
