forked from Minki/linux
Char/Misc fix for 5.6-rc1
Here is a single patch, that fixes up a commit that came in the previous char/misc merge. It fixes a bug in the hpet driver that everyone keeps tripping over in their automated testing. Good thing is, people are catching it. Bad thing it wasn't caught by anyone testing before this. Oh well... This has been in linux-next for a few days with no reported issues. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> -----BEGIN PGP SIGNATURE----- iG0EABECAC0WIQT0tgzFv3jCIUoxPcsxR9QN2y37KQUCXjgwUg8cZ3JlZ0Brcm9h aC5jb20ACgkQMUfUDdst+yk1cwCcCZYjRqGYCo3LCrCDvVN01oNCo5gAnAzjZT+b FI4Pp1tn+j69JLf/EuMp =+ng9 -----END PGP SIGNATURE----- Merge tag 'char-misc-5.6-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc Pull char/misc fix from Greg KH: "Here is a single patch, that fixes up a commit that came in the previous char/misc merge. It fixes a bug in the hpet driver that everyone keeps tripping over in their automated testing. Good thing is, people are catching it. Bad thing it wasn't caught by anyone testing before this. Oh well... This has been in linux-next for a few days with no reported issues" * tag 'char-misc-5.6-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: char: hpet: Fix out-of-bounds read bug
This commit is contained in:
commit
754beeec1d
@ -855,7 +855,7 @@ int hpet_alloc(struct hpet_data *hdp)
|
||||
return 0;
|
||||
}
|
||||
|
||||
hpetp = kzalloc(struct_size(hpetp, hp_dev, hdp->hd_nirqs - 1),
|
||||
hpetp = kzalloc(struct_size(hpetp, hp_dev, hdp->hd_nirqs),
|
||||
GFP_KERNEL);
|
||||
|
||||
if (!hpetp)
|
||||
|
Loading…
Reference in New Issue
Block a user