| commit | 4f9dffefc0b5e9a0c10bdacffd2b65bd56b73eca | [log] [tgz] |
|---|---|---|
| author | Samuel Ortiz <samuel@sortiz.org> | Wed Oct 06 01:03:12 2010 +0200 |
| committer | Jeremie <jer_l_@live.ca> | Sun Jul 08 15:22:18 2012 -0400 |
| tree | 9473f18f92ec284d81a85d762625b416c8898e04 | |
| parent | 6a5a07b8ad5597a8e40b54942f8debaa5bb5dd05 [diff] |
irda: Fix heap memory corruption in iriap.c commit 37f9fc452d138dfc4da2ee1ce5ae85094efc3606 upstream. While parsing the GetValuebyClass command frame, we could potentially write passed the skb->data pointer. Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com> Signed-off-by: Samuel Ortiz <samuel@sortiz.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> Signed-off-by: Andi Kleen <ak@linux.intel.com>