Files
linux/drivers/s390
Dan Carpenter d5719ed814 keyboard: integer underflow bug
commit b652277b09 upstream.

The "ct" variable should be an unsigned int.  Both struct kbdiacrs
->kb_cnt and struct kbd_data ->accent_table_size are unsigned ints.

Making it signed causes a problem in KBDIACRUC because the user could
set the signed bit and cause a buffer overflow.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-03-14 14:29:53 -07:00
..
2010-02-23 07:37:54 -08:00
2011-03-14 14:29:53 -07:00
2010-08-13 13:20:13 -07:00