![]() This fixes the memory corruption case, if nbytes is less than offset and sizeof(struct channel_header) Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Jes Sorensen <Jes.Sorensen@redhat.com> Signed-off-by: Benjamin Romer <benjamin.romer@unisys.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
controlvmchannel.h | ||
controlvmcompletionstatus.h | ||
iovmcall_gnuc.h | ||
periodic_work.c | ||
vbuschannel.h | ||
vbusdeviceinfo.h | ||
visorbus_main.c | ||
visorbus_private.h | ||
visorchannel.c | ||
visorchipset.c | ||
vmcallinterface.h |