Commit b12a0c31 authored Feb 13, 2014 by David S. Miller

linux-can



linux-can-fixes-for-3.14-20140212

Marc Kleine-Budde says:

====================
this is a pull request with one patch for net/master, for the current release
cycle. Olivier Sobrie noticed and fixed that the kvaser_usb driver doesn't
check the number of channels value from the hardware, which may result in
writing over the bounds of an array in the driver.
====================

Signed-off-by: David S. Miller <davem@davemloft.net>

parents 91ff37ff 862474f8

drivers/net/can/usb/kvaser_usb.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -473,6 +473,8 @@ static int kvaser_usb_get_card_info(struct kvaser_usb *dev)
		return err;

		dev->nchannels = msg.u.cardinfo.nchannels;
		if (dev->nchannels > MAX_NET_DEVICES)
		return -EINVAL;

		return 0;
		}

Admin message