diff options
author | Jonas Gorski <jogo@openwrt.org> | 2015-06-10 09:21:36 +0000 |
---|---|---|
committer | Jonas Gorski <jogo@openwrt.org> | 2015-06-10 09:21:36 +0000 |
commit | 9fbd6d0ba0af16648e9d6b70bab953184a263d94 (patch) | |
tree | a8526e3a38857c01cd359c5cb6dcd5857dd4504e /target/linux/generic/files/drivers/net/phy/rtl8366rb.c | |
parent | d24d5412fff17cc0ddafecc47ca9564795e1df3a (diff) | |
download | upstream-9fbd6d0ba0af16648e9d6b70bab953184a263d94.tar.gz upstream-9fbd6d0ba0af16648e9d6b70bab953184a263d94.tar.bz2 upstream-9fbd6d0ba0af16648e9d6b70bab953184a263d94.zip |
b53: fix memory out of bounds access on 64 bit targets
On device reset the sizes for the vlan and port tables were wrongly
calculated based on the pointer size instead of the struct size. This
causes buffer overruns on 64 bit targets, resulting in panics.
Fix this by dereferencing the pointers.
Reported-by: Fedor Konstantinov <blmink@mink.su>
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 45938
Diffstat (limited to 'target/linux/generic/files/drivers/net/phy/rtl8366rb.c')
0 files changed, 0 insertions, 0 deletions