diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2014-09-08 07:18:43 -0400 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@osg.samsung.com> | 2014-09-23 15:13:37 -0400 |
| commit | 3011e5e592a2d31556cc3eff335a1ecccd473fa0 (patch) | |
| tree | 7285f69453ed9f0822019e42afb3ef10fe39c8c8 /fs/9p | |
| parent | f2e323ec96077642d397bb1c355def536d489d16 (diff) | |
[media] firewire: firedtv-avc: potential buffer overflow
"program_info_length" is user controlled and can go up to 4095. The
operand[] array has 509 bytes so we need to add a limit here to prevent
buffer overflows.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Diffstat (limited to 'fs/9p')
0 files changed, 0 insertions, 0 deletions