Kulikov Vasiliy 9c17978089
net: s2io: fix buffer overflow ...
vpd_data[] is allocated as kmalloc(256, GFP_KERNEL), so if cnt = 255
then (cnt + 3) overflows 256. memset() is executed without checking.
vpd_data[cnt+2] must be less than 256-cnt-2 as the latter is number of
vpd_data[] elements to copy.
Do not fill with zero the beginning of nic->serial_num as it will
be filled with vpd_data[].
String in product_name[] should be terminated by '\0'.
Signed-off-by: Kulikov Vasiliy <segooon@gmail.com >
Signed-off-by: David S. Miller <davem@davemloft.net >
2010-07-23 13:05:13 -07:00
2010-05-28 16:14:17 -07:00
2010-05-25 19:41:19 -04:00
2010-07-23 12:50:49 -07:00
2010-05-25 08:07:09 -07:00
2010-07-04 10:40:17 -07:00
2010-05-22 00:36:56 -06:00
2010-07-01 21:28:14 -07:00
2010-05-18 16:10:44 -06:00
2010-05-27 22:05:02 -04:00
2010-05-19 17:10:57 -07:00
2010-05-18 08:49:13 -07:00
2010-05-28 16:14:17 -07:00
2010-05-22 00:36:56 -06:00
2010-05-30 09:12:43 -07:00
2010-05-27 09:12:52 -07:00
2010-05-27 10:22:06 -07:00
2010-05-21 09:37:31 -07:00
2010-05-28 01:37:59 +02:00
2010-05-28 16:14:40 -07:00
2010-05-27 09:19:55 -07:00
2010-05-27 19:59:03 +02:00
2010-05-22 00:36:56 -06:00
2010-05-26 19:51:09 +02:00
2010-05-28 14:26:20 -04:00
2010-05-27 10:22:06 -07:00
2010-07-04 11:48:14 -07:00
2010-05-28 01:37:38 +02:00
2010-07-15 19:05:25 -07:00
2010-05-28 08:35:27 +01:00
2010-05-24 08:01:10 -07:00
2010-05-27 09:12:48 -07:00
2010-05-24 08:01:10 -07:00
2010-05-27 09:12:41 -07:00
2010-05-28 01:38:02 +02:00
2010-05-27 09:12:54 -07:00
2010-05-27 09:12:40 -07:00
2010-05-27 22:05:02 -04:00
2010-07-23 13:05:13 -07:00
2010-05-22 00:36:56 -06:00
2010-07-07 14:58:56 -07:00
2010-05-26 19:51:09 +02:00
2010-05-28 14:42:18 -07:00
2010-05-24 08:01:10 -07:00
2010-05-20 10:16:13 -04:00
2010-05-25 08:16:34 -07:00
2010-05-30 09:02:47 -07:00
2010-05-28 01:37:45 +02:00
2010-05-28 01:37:45 +02:00
2010-07-23 12:36:25 -07:00
2010-05-24 08:01:10 -07:00
2010-07-07 14:58:56 -07:00
2010-06-16 18:10:54 -07:00
2010-05-27 12:46:20 -04:00
2010-05-13 17:43:11 +09:00
2010-05-25 00:48:24 -06:00
2010-06-04 16:00:42 -04:00
2010-07-18 19:15:25 -07:00
2010-05-27 09:12:42 -07:00
2010-07-09 00:09:24 -07:00
2010-07-21 21:09:23 -07:00
2010-05-27 22:05:02 -04:00
2010-05-21 17:22:52 -07:00
2010-05-14 16:59:54 +02:00
2010-05-21 09:37:31 -07:00
2010-05-28 01:37:52 +02:00
2010-05-25 08:07:07 -07:00
2010-05-21 09:37:31 -07:00
2010-05-28 14:26:20 -04:00
9c17978089