]> git.karo-electronics.de Git - karo-tx-linux.git/commit
pcmcia: avoid buffer overflow in pcmcia_setup_isa_irq
authorDominik Brodowski <linux@dominikbrodowski.net>
Tue, 3 Aug 2010 07:33:45 +0000 (09:33 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Fri, 13 Aug 2010 20:30:39 +0000 (13:30 -0700)
commit203824bea46cc2d9809833e77dd39780d5bcb20c
tree1708d9e6896666186d029cc71bb2a5388b48e72a
parent4fbb306c756c548a75d480141e327111e4d94d20
pcmcia: avoid buffer overflow in pcmcia_setup_isa_irq

commit 127c03cdbad9bd5af5d7f33bd31a1015a90cb77f upstream.

NR_IRQS may be as low as 16, causing a (harmless?) buffer overflow in
pcmcia_setup_isa_irq():

static u8 pcmcia_used_irq[NR_IRQS];

...

if ((try < 32) && pcmcia_used_irq[irq])
continue;

This is read-only, so if this address would be non-zero, it would just
mean we would not attempt an IRQ >= NR_IRQS -- which would fail anyway!
And as request_irq() fails for an irq >= NR_IRQS, the setting code path:

pcmcia_used_irq[irq]++;

is never reached as well.

Reported-by: Christoph Fritz <chf.fritz@googlemail.com>
Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net>
Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/pcmcia/pcmcia_resource.c