diff options
| author | Willy Tarreau <w@1wt.eu> | 2017-05-16 19:18:55 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-05-25 15:44:30 +0200 |
| commit | 5d263d94a870a774a24acb2a2cc1e79ef39c2416 (patch) | |
| tree | dd8eed6005f58494800f0b9deaf807fb91ddadde /drivers/char/tile-srom.c | |
| parent | 7a2b8471ab1243437215468b4da6c5ddfd4d80da (diff) | |
char: lp: fix possible integer overflow in lp_setup()
commit 3e21f4af170bebf47c187c1ff8bf155583c9f3b1 upstream.
The lp_setup() code doesn't apply any bounds checking when passing
"lp=none", and only in this case, resulting in an overflow of the
parport_nr[] array. All versions in Git history are affected.
Reported-By: Roee Hay <roee.hay@hcl.com>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/char/tile-srom.c')
0 files changed, 0 insertions, 0 deletions