OSDN Git Service
(root)
/
sagit-ice-cold
/
kernel_xiaomi_msm8998.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
net_sched: fix an OOB access in cls_tcindex
[sagit-ice-cold/kernel_xiaomi_msm8998.git]
/
fs
/
ncpfs
/
ncplib_kernel.c
diff --git
a/fs/ncpfs/ncplib_kernel.c
b/fs/ncpfs/ncplib_kernel.c
index
88dbbc9
..
f571570
100644
(file)
--- a/
fs/ncpfs/ncplib_kernel.c
+++ b/
fs/ncpfs/ncplib_kernel.c
@@
-980,6
+980,10
@@
ncp_read_kernel(struct ncp_server *server, const char *file_id,
goto out;
}
*bytes_read = ncp_reply_be16(server, 0);
+ if (*bytes_read > to_read) {
+ result = -EINVAL;
+ goto out;
+ }
source = ncp_reply_data(server, 2 + (offset & 1));
memcpy(target, source, *bytes_read);