On Fri, Dec 20, 2013 at 07:07:38PM +0800, Wenliang Fan wrote: > The checking condition in 'validateFlash2xReadWrite()' is not > sufficient. A large number invalid would cause an integer overflow and > pass the condition, which could cause further integer overflows in > 'Bcmchar.c:bcm_char_ioctl()'. > > Signed-off-by: Wenliang Fan <fanwlexca@xxxxxxxxx> Looks good. Reviewed-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> regards, dan carpenter _______________________________________________ devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxx http://driverdev.linuxdriverproject.org/mailman/listinfo/driverdev-devel
