Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
skge: potential memory corruption in skge_get_regs()
[ Upstream commit 294c149 ] The "p" buffer is 0x4000 bytes long. B3_RI_WTO_R1 is 0x190. The value of "regs->len" is in the 1-0x4000 range. The bug here is that "regs->len - B3_RI_WTO_R1" can be a negative value which would lead to memory corruption and an abrupt crash. Fixes: c3f8be9 ("[PATCH] skge: expand ethtool debug register dump") Signed-off-by: Dan Carpenter <[email protected]> Signed-off-by: David S. Miller <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]>
- Loading branch information