Staging driver tree fix for 3.14-rc6
Here is a single staging driver fix for your tree. It resolves an issue with arbritary writes to memory if a specific driver is loaded. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEABECAAYFAlMbwF4ACgkQMUfUDdst+ynSIwCZAfb/XkCqRqnzW8nfAOqITRP9 VwUAoMHjGSr6mBbXFzHz5QoxGwylY+dW =+BBI -----END PGP SIGNATURE----- Merge tag 'staging-3.15-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging Pull staging driver tree fix from Greg KH: "Here is a single staging driver fix for your tree. It resolves an issue with arbritary writes to memory if a specific driver is loaded" * tag 'staging-3.15-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging: staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl()
This commit is contained in:
commit
a491ce72f8
|
@ -866,6 +866,8 @@ c4_ioctl (struct net_device *ndev, struct ifreq *ifr, int cmd)
|
|||
_IOC_SIZE (iocmd));
|
||||
#endif
|
||||
iolen = _IOC_SIZE (iocmd);
|
||||
if (iolen > sizeof(arg))
|
||||
return -EFAULT;
|
||||
data = ifr->ifr_data + sizeof (iocmd);
|
||||
if (copy_from_user (&arg, data, iolen))
|
||||
return -EFAULT;
|
||||
|
|
Loading…
Reference in a new issue