We could allocate less memory than intended because we do:
bnad->regdata = kzalloc(len << 2, GFP_KERNEL);
The shift can overflow leading to a crash. This is debugfs code so the
impact is very small.
Fixes:
|
||
---|---|---|
.. | ||
bfa_cee.c | ||
bfa_cee.h | ||
bfa_cs.h | ||
bfa_defs_cna.h | ||
bfa_defs_mfg_comm.h | ||
bfa_defs_status.h | ||
bfa_defs.h | ||
bfa_ioc_ct.c | ||
bfa_ioc.c | ||
bfa_ioc.h | ||
bfa_msgq.c | ||
bfa_msgq.h | ||
bfi_cna.h | ||
bfi_enet.h | ||
bfi_reg.h | ||
bfi.h | ||
bna_enet.c | ||
bna_hw_defs.h | ||
bna_tx_rx.c | ||
bna_types.h | ||
bna.h | ||
bnad_debugfs.c | ||
bnad_ethtool.c | ||
bnad.c | ||
bnad.h | ||
cna_fwimg.c | ||
cna.h | ||
Kconfig | ||
Makefile |