On Tue, 2022-06-14 at 10:33 -0700, Hyunwoo Kim wrote: > An integer overflow occurs in the iwl_write_to_user_buf() function, > which is called by the iwl_dbgfs_monitor_data_read() function. > Out of curiosity, how did you find this? johannes
On Tue, 2022-06-14 at 10:33 -0700, Hyunwoo Kim wrote: > An integer overflow occurs in the iwl_write_to_user_buf() function, > which is called by the iwl_dbgfs_monitor_data_read() function. > Out of curiosity, how did you find this? johannes