| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 5 Aug 2015 12:41:00 -0400 From: Allen Hubbe <Allen.Hubbe@....com> To: Dan Williams <dan.j.williams@...el.com>, Dave Jiang <dave.jiang@...el.com> Cc: dmaengine@...r.kernel.org, linux-kernel@...r.kernel.org, Allen Hubbe <Allen.Hubbe@....com> Subject: [PATCH v3 2/2] ioatdma: fix overflow of u16 in freeing resources If the allocation order is 16, then the u16 count will overflow and wrap to zero when assigned the value 1 << 16. Change the type of 'total_descs' to int, so that it is large enough to store a value equal or greater than 1 << 16. Signed-off-by: Allen Hubbe <Allen.Hubbe@....com> --- drivers/dma/ioat/init.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/dma/ioat/init.c b/drivers/dma/ioat/init.c index 2c6846a12688..f078af445d5c 100644 --- a/drivers/dma/ioat/init.c +++ b/drivers/dma/ioat/init.c @@ -603,7 +603,7 @@ static void ioat_free_chan_resources(struct dma_chan *c) struct ioatdma_chan *ioat_chan = to_ioat_chan(c); struct ioatdma_device *ioat_dma = ioat_chan->ioat_dma; struct ioat_ring_ent *desc; - const u16 total_descs = 1 << ioat_chan->alloc_order; + const int total_descs = 1 << ioat_chan->alloc_order; int descs; int i; -- 2.5.0.rc1 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists