mirror of
https://github.com/torvalds/linux.git
synced 2024-12-28 22:02:28 +00:00
7361d1bc30
The helper mpi_read_raw_from_sgl sets the number of entries in
the SG list according to nbytes. However, if the last entry
in the SG list contains more data than nbytes, then it may overrun
the buffer because it only allocates enough memory for nbytes.
Fixes:
|
||
---|---|---|
.. | ||
ec.c | ||
generic_mpih-add1.c | ||
generic_mpih-lshift.c | ||
generic_mpih-mul1.c | ||
generic_mpih-mul2.c | ||
generic_mpih-mul3.c | ||
generic_mpih-rshift.c | ||
generic_mpih-sub1.c | ||
longlong.h | ||
Makefile | ||
mpi-add.c | ||
mpi-bit.c | ||
mpi-cmp.c | ||
mpi-div.c | ||
mpi-inline.h | ||
mpi-internal.h | ||
mpi-inv.c | ||
mpi-mod.c | ||
mpi-mul.c | ||
mpi-pow.c | ||
mpi-sub-ui.c | ||
mpicoder.c | ||
mpih-cmp.c | ||
mpih-div.c | ||
mpih-mul.c | ||
mpiutil.c |