lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Revert "Staging: comedi: integer overflow in do_insnlist_ioctl()"

Browse Source 
This reverts commit e384a41141.
It's not the correct way to solve this issue.

Acked-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
Greg Kroah-Hartman
2011-11-28 04:34:34 +09:00
parent e384a41141
commit 06b446c8af
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
drivers/staging/comedi/comedi_fops.c
View File

@@ -670,11 +670,6 @@ static int do_insnlist_ioctl(struct comedi_device *dev,
goto error; goto error;
} }
if (sizeof(struct comedi_insn) * insnlist.n_insns < insnlist.n_insns) {
ret = -EINVAL;
goto error;
}
insns = insns =
kmalloc(sizeof(struct comedi_insn) * insnlist.n_insns, GFP_KERNEL); kmalloc(sizeof(struct comedi_insn) * insnlist.n_insns, GFP_KERNEL);
if (!insns) { if (!insns) {