diff options
| author | Michael Albaugh <Michael.Albaugh@Qlogic.com> | 2007-10-18 10:36:40 -0700 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2007-10-30 10:58:53 -0700 |
| commit | 627934448ec80f823eafd0a7d4b7541515d543a3 (patch) | |
| tree | d29e64a2c7ac9d9b27d371911013c091a1b8f96f /kernel/rwsem.c | |
| parent | fffbfeaa680e2b87a591e141f2aa7e9e91184956 (diff) | |
IB/ipath: Limit length checksummed in eeprom
The small eeprom that holds the GUID etc. contains a data-length, but if
the actual eeprom is new or has been erased, that byte will be 0xFF,
which is greater than the maximum physical length of the eeprom, and
more importantly greater than the length of the buffer we vmalloc'd.
Sanity-check the length to avoid the possbility of reading past end of
buffer.
Signed-off-by: Michael Albaugh <Michael.Albaugh@Qlogic.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'kernel/rwsem.c')
0 files changed, 0 insertions, 0 deletions