projects / wrapfs-4.2.y.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1c02865) | patch
irda: precedence bug in irlmp_seq_hb_idx()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 19 Oct 2015 10:16:49 +0000 (13:16 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 9 Dec 2015 19:31:03 +0000 (14:31 -0500)
commit87056ada2a1d6906db244551a33f8f439d8d1af1
treef4e67d0bb3041541c295ee04db685b2243ef6b2etree | snapshot
parent1c02865136fee1d10d434dc9e3616c8e39905e9bcommit | diff
irda: precedence bug in irlmp_seq_hb_idx()

[ Upstream commit 50010c20597d14667eff0fdb628309986f195230 ]

This is decrementing the pointer, instead of the value stored in the
pointer.  KASan detects it as an out of bounds reference.

Reported-by: "Berry Cheng 程君(成淼)" <chengmiao.cj@alibaba-inc.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/irda/irlmp.c diff | blob | history
wrapfs-4.2.y