| commit | e9db5c21d3646a6454fcd04938dd215ac3ab620a | [log] [tgz] |
|---|---|---|
| author | Wenliang Fan <fanwlexca@gmail.com> | Tue Dec 17 11:25:28 2013 +0800 |
| committer | David S. Miller <davem@davemloft.net> | Thu Dec 19 15:02:14 2013 -0500 |
| tree | 52bc7616461aff96f0a889317b2861ec8d301eab | |
| parent | 0c8d087c04cdcef501064552149289866e53aa6c [diff] |
drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl() The local variable 'bi' comes from userspace. If userspace passed a large number to 'bi.data.calibrate', there would be an integer overflow in the following line: s->hdlctx.calibrate = bi.data.calibrate * s->par.bitrate / 16; Signed-off-by: Wenliang Fan <fanwlexca@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>