On Fri, Dec 20, 2013 at 07:07:38PM +0800, Wenliang Fan wrote: > The checking condition in 'validateFlash2xReadWrite()' is not > sufficient. A large number invalid would cause an integer overflow and > pass the condition, which could cause further integer overflows in > 'Bcmchar.c:bcm_char_ioctl()'. > > Signed-off-by: Wenliang Fan <fanwle...@gmail.com>
Looks good. Reviewed-by: Dan Carpenter <dan.carpen...@oracle.com> regards, dan carpenter -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
