litmus-rt.git - The LITMUS^RT kernel.

The LITMUS^RT kernel.

Bjoern Brandenburg

about summary refs log tree commit diff stats

diff options

author	Vlad Yasevich <vladislav.yasevich@hp.com>	2008-08-27 19:09:49 -0400
committer	David S. Miller <davem@davemloft.net>	2008-08-27 19:09:49 -0400
commit	d97240552cd98c4b07322f30f66fd9c3ba4171de (patch)
tree	61a8fd1ace711bcf2c832d0c453d8fbf6f8f3003 /drivers/rtc/class.c
parent	328fc47ea0bcc27d9afa69c3ad6e52431cadd76c (diff)

sctp: fix random memory dereference with SCTP_HMAC_IDENT option.

The number of identifiers needs to be checked against the option length. Also, the identifier index provided needs to be verified to make sure that it doesn't exceed the bounds of the array. Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>

Diffstat (limited to 'drivers/rtc/class.c')

0 files changed, 0 insertions, 0 deletions

rmation) */ }; struct eni_dev { /*-------------------------------- spinlock */ spinlock_t lock; /* sync with interrupt */ struct tasklet_struct task; /* tasklet for interrupt work */ u32 events; /* pending events */ /*-------------------------------- base pointers into Midway address space */ void __iomem *phy; /* PHY interface chip registers */ void __iomem *reg; /* register base */ void __iomem *ram; /* RAM base */ void __iomem *vci; /* VCI table */ void __iomem *rx_dma; /* RX DMA queue */ void __iomem *tx_dma; /* TX DMA queue */ void __iomem *service; /* service list */ /*-------------------------------- TX part */ struct eni_tx tx[NR_CHAN]; /* TX channels */ struct eni_tx *ubr; /* UBR channel */ struct sk_buff_head tx_queue; /* PDUs currently being TX DMAed*/ wait_queue_head_t tx_wait; /* for close */ int tx_bw; /* remaining bandwidth */ u32 dma[TX_DMA_BUF*2]; /* DMA request scratch area */ int tx_mult; /* buffer size multiplier (percent) */ /*-------------------------------- RX part */ u32 serv_read; /* host service read index */ struct atm_vcc *fast,*last_fast;/* queues of VCCs with pending PDUs */ struct atm_vcc *slow,*last_slow; struct atm_vcc **rx_map; /* for fast lookups */ struct sk_buff_head rx_queue; /* PDUs currently being RX-DMAed */ wait_queue_head_t rx_wait; /* for close */ int rx_mult; /* buffer size multiplier (percent) */ /*-------------------------------- statistics */ unsigned long lost; /* number of lost cells (RX) */ /*-------------------------------- memory management */ unsigned long base_diff; /* virtual-real base address */ int free_len; /* free list length */ struct eni_free *free_list; /* free list */ int free_list_size; /* maximum size of free list */ /*-------------------------------- ENI links */ struct atm_dev *more; /* other ENI devices */ /*-------------------------------- general information */ int mem; /* RAM on board (in bytes) */ int asic; /* PCI interface type, 0 for FPGA */ unsigned int irq; /* IRQ */ struct pci_dev *pci_dev; /* PCI stuff */ }; #define ENI_DEV(d) ((struct eni_dev *) (d)->dev_data) #define ENI_VCC(d) ((struct eni_vcc *) (d)->dev_data) struct eni_skb_prv { struct atm_skb_data _; /* reserved */ unsigned long pos; /* position of next descriptor */ int size; /* PDU size in reassembly buffer */ dma_addr_t paddr; /* DMA handle */ }; #define ENI_PRV_SIZE(skb) (((struct eni_skb_prv *) (skb)->cb)->size) #define ENI_PRV_POS(skb) (((struct eni_skb_prv *) (skb)->cb)->pos) #define ENI_PRV_PADDR(skb) (((struct eni_skb_prv *) (skb)->cb)->paddr) #endif


context:
space:
mode: