diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2015-07-28 18:48:21 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2015-07-31 16:18:43 -0700 |
| commit | d1f0f3118e55ad80136d19dd4afdb32ccba26a42 (patch) | |
| tree | e21e52d502771ca807e5a4e1e5deed271e14b3ee /include | |
| parent | 881bf281237c3eaf7759040653e779c6cc6c2e00 (diff) | |
Staging: rtl8192e: array overflow in rtl92e_set_swcam()
"EntryNo" is comes from the user in the ioctl and it's a number between
0-255. The ieee->swcamtable[] array only has 32 elements so it can
result in memory corruption.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions