diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2017-10-04 09:50:37 +0200 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2017-10-17 04:35:13 +0200 |
| commit | 3e351275655d3c84dc28abf170def9786db5176d (patch) | |
| tree | 88f0f09591a36ad920c5020f4293f3fc27c977ae /drivers/scsi/aha152x.c | |
| parent | scsi: libcxgbi: simplify task->hdr allocation for mgmt cmds (diff) | |
| download | linux-3e351275655d3c84dc28abf170def9786db5176d.tar.xz linux-3e351275655d3c84dc28abf170def9786db5176d.zip | |
scsi: bfa: integer overflow in debugfs
We could allocate less memory than intended because we do:
bfad->regdata = kzalloc(len << 2, GFP_KERNEL);
The shift can overflow leading to a crash. This is debugfs code so the
impact is very small. I fixed the network version of this in March with
commit 13e2d5187f6b ("bna: integer overflow bug in debugfs").
Fixes: ab2a9ba189e8 ("[SCSI] bfa: add debugfs support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'drivers/scsi/aha152x.c')
0 files changed, 0 insertions, 0 deletions