Re: question about potential integer truncation in r8a66597_hub_descriptor

2015-09-28 Thread PaX Team
On 28 Sep 2015 at 10:31, David Laight wrote: > From: PaX Team > > Sent: 26 September 2015 14:47 > > hi all, > > > > drivers/usb/host/r8a66597-hcd.c:r8a66597_hub_descriptor can truncate > > r8a66597.max_root_hub (of type unsigned int) to an unsigned char: > &

question about potential integer truncation in r8a66597_hub_descriptor

2015-09-26 Thread PaX Team
s is correct? FTR, this issue was detected with the upcoming version of the size overflow plugin we have in PaX/grsecurity and there're a handful of similar cases in the tree where potentially unwanted or unnecessary integer truncations occur, this being one of these. any opinion/help is welcome!