diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2017-10-04 10:50:37 +0300 |
---|---|---|
committer | Martin K. Petersen <martin.petersen@oracle.com> | 2017-10-17 05:35:13 +0300 |
commit | 3e351275655d3c84dc28abf170def9786db5176d (patch) | |
tree | 88f0f09591a36ad920c5020f4293f3fc27c977ae /drivers/scsi/nsp32.c | |
parent | 2269848386c4b8395bc67eaaf7d08011da7c07ef (diff) | |
download | linux-3e351275655d3c84dc28abf170def9786db5176d.tar.xz |
scsi: bfa: integer overflow in debugfs
We could allocate less memory than intended because we do:
bfad->regdata = kzalloc(len << 2, GFP_KERNEL);
The shift can overflow leading to a crash. This is debugfs code so the
impact is very small. I fixed the network version of this in March with
commit 13e2d5187f6b ("bna: integer overflow bug in debugfs").
Fixes: ab2a9ba189e8 ("[SCSI] bfa: add debugfs support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'drivers/scsi/nsp32.c')
0 files changed, 0 insertions, 0 deletions