diff options
| author | Sachin Prabhu <sprabhu@redhat.com> | 2012-04-17 14:36:40 +0100 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2012-05-31 00:44:06 +0100 |
| commit | b7d52ac86a9753520a696af25d333e3451eeae92 (patch) | |
| tree | e4f764b5561ad70a8e219b216c2e437665e212f3 /drivers/mtd/lpddr/lpddr_cmds.c | |
| parent | 84e017e3ff4113a32c827f2d7f96e1a9b1f7a677 (diff) | |
Avoid beyond bounds copy while caching ACL
commit 5794d21ef4639f0e33440927bb903f9598c21e92 upstream.
When attempting to cache ACLs returned from the server, if the bitmap
size + the ACL size is greater than a PAGE_SIZE but the ACL size itself
is smaller than a PAGE_SIZE, we can read past the buffer page boundary.
Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
Reported-by: Jian Li <jiali@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'drivers/mtd/lpddr/lpddr_cmds.c')
0 files changed, 0 insertions, 0 deletions