A line of code is attempting to set the entire struct vnt_rdes0 to zero by treating it as unsigned int. However, this only works if sizeof(unsigned int) is equal to sizeof(struct vnt_rdes0) (4 bytes), which is not guaranteed. This may cause memory conruption if sizeof(unsigned int) is 8 bytes for example. Fix the problem by using memset instead. Signed-off-by: Nam Cao <namcaov@xxxxxxxxx> --- drivers/staging/vt6655/device_main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/staging/vt6655/device_main.c b/drivers/staging/vt6655/device_main.c index 8e2a976aaaad..a38657769c20 100644 --- a/drivers/staging/vt6655/device_main.c +++ b/drivers/staging/vt6655/device_main.c @@ -867,7 +867,7 @@ static bool device_alloc_rx_buf(struct vnt_private *priv, return false; } - *((unsigned int *)&rd->rd0) = 0; /* FIX cast */ + memset((void *)&rd->rd0, 0, sizeof(rd->rd0)); rd->rd0.res_count = cpu_to_le16(priv->rx_buf_sz); rd->rd0.owner = OWNED_BY_NIC; -- 2.25.1
