diff options
author | Colin Ian King <colin.king@canonical.com> | 2016-02-25 22:58:25 +0000 |
---|---|---|
committer | Martin K. Petersen <martin.petersen@oracle.com> | 2016-03-01 20:08:49 -0500 |
commit | bbb7bace0346d43da1bd27d809928f3d07bbd1e7 (patch) | |
tree | 84328303e952487f72ec89aae0a5bca6d1ffd3cf /samples/kfifo | |
parent | a6d24143fca421c836f78538705c8e5b3ef04e3d (diff) |
snic: correctly check for array overrun on overly long version number
The snic version number is expected to be 4 decimals in the form like a
netmask string with each number stored in an element in array v.
However, there is an off-by-one check on the number of elements in v
allowing one to pass a 5 decimal version number causing v[4] to be
referenced, causing a buffer overrun. Fix the off-by-one error by
comparing to i > 3 rather than 4.
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Shane Seymour <shane.seymour@hpe.com>
Reviewed-by: Ewan Milne <emilne@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'samples/kfifo')
0 files changed, 0 insertions, 0 deletions