projects / GitHub / LineageOS / G12 / android_kernel_amlogic_linux-4.9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 95e838c) | patch
VMCI: integer overflow in vmci_datagram_dispatch()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 29 Aug 2014 08:42:56 +0000 (11:42 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 24 Sep 2014 06:26:42 +0000 (23:26 -0700)
commit2e45354645f77e83fe3832f150acdcfeff45f44c
tree3fe57917616af7a7a1cdaef5cf0d23ff018ffd94tree | snapshot (tar.gz zip)
parent95e838c915edbdde366d111905245171ac99c2cccommit | diff
VMCI: integer overflow in vmci_datagram_dispatch()

This is untrusted user data from vmci_host_do_send_datagram() so the
VMCI_DG_SIZE() macro can have an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/misc/vmw_vmci/vmci_datagram.c diff | blob | blame | history