linux/drivers/isdn/hardware/mISDN
Dan Carpenter 819a100846 mISDN: array underflow in open_bchannel()
There are two channels here.  User space starts counting channels at one
but in the kernel we start at zero.  If the user passes in a zero
channel that's invalid and could lead to memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-03-27 22:42:32 -04:00
..
Kconfig
Makefile
avmfritz.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
hfc_multi.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
hfc_multi_8xx.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
hfc_pci.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
hfcmulti.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
hfcpci.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
hfcsusb.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
hfcsusb.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
iohelper.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
ipac.h tree-wide: fix comment/printk typos 2010-11-01 15:38:34 -04:00
isar.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
mISDNinfineon.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
mISDNipac.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
mISDNisar.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
netjet.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
netjet.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
speedfax.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
w6692.c mISDN: array underflow in open_bchannel() 2012-03-27 22:42:32 -04:00
w6692.h