diff options
author | roel kluin <roel.kluin@gmail.com> | 2009-07-29 07:18:56 +0400 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2009-07-31 00:27:34 +0400 |
commit | f0c5b35c6c93c89a9d8ccab19b0b4842f5dfddc5 (patch) | |
tree | 435e5f63d7f6dc4f822af6e5d3cca35e0218984b /drivers/i2c | |
parent | a3e8ee682003685b8b9c98c89340a42e48c3e813 (diff) | |
download | linux-f0c5b35c6c93c89a9d8ccab19b0b4842f5dfddc5.tar.xz |
eexpress: Read buffer overflow
start_code is 69 words, but the code always writes a multiple of 16 words,
so the last 11 words written are outside the array.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/i2c')
0 files changed, 0 insertions, 0 deletions