The check is not right, it should be "(int)(skb->len) <= 0", or we
just remove this check if "skb->len will never be negative or 0".
2014-05-13 22:57 GMT+08:00 Ronciak, John :
>> -Original Message-
>> From: xuyongjia...@gmail.com [mailto:xuyongjia...@gmail.com]
>> Sent: Monday, May 12, 201
Hi,
Buffer overflow found in drivers/video/fbmem.c.
[Version]:Newest
[Detail]:
1592 static int do_register_framebuffer(struct fb_info *fb_info)
1593 {
1594 | int i;
1595 | struct fb_event event;
1596 | struct fb_videomode mode;
1607 | num_registered_fb++;
1608 | for (i = 0 ; i <
2 matches
Mail list logo