diff options
| author | Roel Kluin <roel.kluin@gmail.com> | 2009-08-08 00:35:31 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2009-09-15 12:02:09 -0700 |
| commit | 03cd7136d68b4877a9e1793d31cab38fdcb67434 (patch) | |
| tree | db3e47648bd9ef6492d47e0630ccc639827905b2 /drivers/mtd/mtdblock.c | |
| parent | 256a816b6b78bf29fba0c0f1bbcf998953429422 (diff) | |
Staging: vt6655: fix possible Read buffer overflow
If pDevice->sOpts.nRxDescs{0,1} or nTxDescs[{0,1}] is zero, the loop ends with
i == 0, and we write aRD{0,1}Ring[-1]. apTD{0,1}Rings[-1] respectively.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/mtd/mtdblock.c')
0 files changed, 0 insertions, 0 deletions