On Sat, Jun 18, 2016 at 10:52 AM, Linus Walleij
<linus.walleij@xxxxxxxxxx> wrote:
> On Fri, Jun 17, 2016 at 11:15 AM, Dan Carpenter
> <dan.carpenter@xxxxxxxxxx> wrote:
>
>> If anon_inode_getfd() fails then "i" is set to GPIOHANDLES_MAX. It
>> means that we will read beyond the end of the array and dereference an
>> invalid pointer.
>>
>> Fixes: d7c51b47ac11 ('gpio: userspace ABI for reading/writing GPIO lines')
>> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
>
> Ouch, yeah that happens when you request max number of handles, thanks.
>
> Patch applied.
Ah no, I saw the real problem now. Sending another patch.
Yours,
Linus Walleij
--
To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
