Commit e0aa762c authored by Dan Carpenter's avatar Dan Carpenter Committed by Greg Kroah-Hartman

Staging: gdm72xx: underflow bug in gdm_wimax_ioctl_get_data()

"size" here should be unsigned, otherwise we might end up trying to copy
negative bytes in gdm_wimax_ioctl_get_data() resulting in an information
leak.
Reported-by: default avatarAlan Cox <gnomes@lxorguk.ukuu.org.uk>
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent deb0b53b
......@@ -74,12 +74,12 @@ struct fsm_s {
};
struct data_s {
int size;
unsigned int size;
void *buf;
};
struct udata_s {
int size;
unsigned int size;
void __user *buf;
};
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment