Xi Wang
e424fb8cc4
panasonic-laptop: avoid overflow in acpi_pcc_hotkey_add()
...
num_sifr could go negative since acpi_pcc_get_sqty() returns -EINVAL
on error. Then it could bypass the sanity check (num_sifr > 255).
The subsequent call to kzalloc() would allocate a small buffer, leading
to a memory corruption.
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Matthew Garrett <mjg@redhat.com>
2012-03-12 10:25:51 -04:00
..
2012-03-12 09:58:02 -04:00
2011-08-05 15:21:51 -04:00
2012-03-12 09:56:47 -04:00
2012-01-03 22:54:56 -05:00
2012-01-03 22:54:55 -05:00
2011-08-05 14:46:04 -04:00
2012-01-03 22:54:55 -05:00
2011-08-05 14:46:04 -04:00
2011-03-22 17:43:59 -07:00
2012-01-13 09:32:20 +10:30
2011-11-17 10:29:02 -02:00
2011-05-27 12:35:47 -04:00
2011-08-05 15:21:47 -04:00
2011-10-24 16:52:38 +02:00
2011-08-05 14:46:04 -04:00
2011-05-27 12:35:47 -04:00
2012-03-12 09:57:52 -04:00
2011-05-27 12:35:48 -04:00
2011-10-31 17:46:07 -07:00
2011-07-11 09:52:35 -04:00
2012-02-21 16:47:28 -08:00
2012-01-03 22:54:55 -05:00
2012-02-21 16:47:28 -08:00
2010-12-23 09:51:36 +00:00
2012-01-03 22:54:55 -05:00
2011-05-27 12:36:46 -04:00
2011-08-05 14:46:11 -04:00
2012-01-13 09:32:20 +10:30
2011-05-27 12:35:50 -04:00
2011-08-05 14:46:14 -04:00
2011-12-21 16:26:03 -08:00
2011-10-24 16:52:39 +02:00
2012-03-12 09:57:52 -04:00
2012-03-12 09:57:52 -04:00
2012-01-13 09:32:20 +10:30
2011-10-31 19:30:36 -04:00
2011-05-09 11:40:38 +10:00
2012-03-12 10:25:51 -04:00
2012-01-13 09:32:20 +10:30
2011-08-05 15:21:47 -04:00
2011-10-24 16:52:42 +02:00
2011-05-27 12:35:51 -04:00
2012-01-13 09:32:20 +10:30
2011-10-24 16:52:37 +02:00
2011-12-05 13:07:28 -05:00
2011-05-27 12:35:52 -04:00
2012-01-13 09:32:20 +10:30
2010-10-21 10:10:44 -04:00
2011-05-27 12:35:53 -04:00