eexpress: Read buffer overflow
authorroel kluin <roel.kluin@gmail.com>
Wed, 29 Jul 2009 03:18:56 +0000 (03:18 +0000)
committerDavid S. Miller <davem@davemloft.net>
Thu, 30 Jul 2009 20:27:34 +0000 (13:27 -0700)
commitf0c5b35c6c93c89a9d8ccab19b0b4842f5dfddc5
tree435e5f63d7f6dc4f822af6e5d3cca35e0218984b
parenta3e8ee682003685b8b9c98c89340a42e48c3e813
eexpress: Read buffer overflow

start_code is 69 words, but the code always writes a multiple of 16 words,
so the last 11 words written are outside the array.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/eexpress.c