alistair23-linux/drivers/net/wan
Dan Carpenter a28d0e873d wan/x25_asy: integer overflow in x25_asy_change_mtu()
If "newmtu * 2 + 4" is too large then it can cause an integer overflow
leading to memory corruption.  Eric Dumazet suggests that 65534 is a
reasonable upper limit.

Btw, "newmtu" is not allowed to be a negative number because of the
check in dev_set_mtu(), so that's ok.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2014-07-17 16:47:50 -07:00
..
lmc Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2014-01-25 11:17:34 -08:00
.gitignore
c101.c
cosa.c driver/net: cosa driver uses udelay incorrectly 2014-04-15 00:08:22 -04:00
cosa.h
dlci.c wan: dlci: Remove unused netdev_priv pointer 2014-02-09 18:40:56 -08:00
dscc4.c
farsync.c farsync: fix invalid memory accesses in fst_add_one() and fst_init_card() 2014-07-11 13:34:48 -07:00
farsync.h
hd64570.c drivers/net: delete non-required instances of include <linux/init.h> 2014-01-16 11:53:26 -08:00
hd64570.h net: Spelling s/transmition/transmission/ 2014-01-14 17:11:26 -08:00
hd64572.c drivers/net: delete non-required instances of include <linux/init.h> 2014-01-16 11:53:26 -08:00
hd64572.h net: Spelling s/transmition/transmission/ 2014-01-14 17:11:26 -08:00
hdlc.c
hdlc_cisco.c
hdlc_fr.c
hdlc_ppp.c
hdlc_raw.c
hdlc_raw_eth.c
hdlc_x25.c
hostess_sv11.c
ixp4xx_hss.c
Kconfig
lapbether.c
Makefile
n2.c
pc300too.c
pci200syn.c
sbni.c drivers: net: Include new header file in sbni.c 2013-12-19 18:51:20 -05:00
sbni.h
sdla.c drivers/net/wan: delete unneeded call to netdev_priv 2014-05-15 16:57:47 -04:00
sealevel.c
wanxl.c wan: wanxl: remove unnecessary pci_set_drvdata() 2013-12-09 18:09:29 -05:00
wanxl.h
wanxlfw.inc_shipped
wanxlfw.S
x25_asy.c wan/x25_asy: integer overflow in x25_asy_change_mtu() 2014-07-17 16:47:50 -07:00
x25_asy.h
z85230.c
z85230.h