Files
linux/drivers
Kees Cook 304a854922 usb: iowarrior: don't trust report_size for buffer size
commit 3ed780117d upstream.

If the iowarrior devices in this case statement support more than 8 bytes
per report, it is possible to write past the end of a kernel heap allocation.
This will probably never be possible, but change the allocation to be more
defensive anyway.

Signed-off-by: Kees Cook <kees.cook@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Acked-by: Brandon Philips <bphilips@suse.de>
2011-03-07 15:17:58 -08:00
..
2011-01-07 14:43:17 -08:00
2011-01-07 14:43:06 -08:00
2010-08-26 16:41:42 -07:00
2011-03-07 15:17:58 -08:00
2009-10-15 09:58:27 -06:00
2009-11-12 07:26:01 -08:00
2011-02-17 15:37:00 -08:00
2010-08-13 13:20:13 -07:00
2011-02-17 15:37:03 -08:00
2010-05-12 14:57:15 -07:00