diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2012-05-18 07:36:47 (GMT) |
---|---|---|
committer | John W. Linville <linville@tuxdriver.com> | 2012-05-25 15:16:16 (GMT) |
commit | 885ba1da689299ec52e646ca1a2429b8de55f364 (patch) | |
tree | 14cda3eb36796e77510994306c73197f47a5ff16 /drivers/net | |
parent | f380f2c4a12e913356bd49f8790ec1063c4fe9f8 (diff) | |
download | linux-885ba1da689299ec52e646ca1a2429b8de55f364.tar.xz |
NFC: potential integer overflow problem in check_crc()
If "buf[0]" is 255 then "len" gets set to 0. The call to
"crc_ccitt(0xffff, buf, len - 2);" casts the "len - 2" to a high
positive number which is ugly.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net')
0 files changed, 0 insertions, 0 deletions