Dan Carpenter 294c149a20 skge: potential memory corruption in skge_get_regs()
The "p" buffer is 0x4000 bytes long.  B3_RI_WTO_R1 is 0x190.  The value
of "regs->len" is in the 1-0x4000 range.  The bug here is that
"regs->len - B3_RI_WTO_R1" can be a negative value which would lead to
memory corruption and an abrupt crash.

Fixes: c3f8be961808 ("[PATCH] skge: expand ethtool debug register dump")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-02-01 10:00:22 -08:00
..
2019-01-26 15:03:43 -08:00
2019-01-19 07:17:19 +12:00
2019-01-20 09:12:50 +12:00
2018-12-31 17:32:35 -08:00
2018-12-29 08:20:44 -07:00
2019-01-25 13:03:34 -10:00
2018-12-27 10:43:24 -08:00
2019-01-05 11:28:39 -08:00
2019-01-09 19:20:31 -05:00
2019-01-11 00:15:04 +01:00
2019-01-15 06:24:36 +12:00
2019-01-18 17:17:20 +12:00
2019-01-22 07:27:17 +13:00
2019-01-18 23:32:29 +01:00
2019-01-05 11:30:37 -08:00
2018-12-28 16:52:18 -08:00
2019-01-15 06:24:36 +12:00
2019-01-25 13:03:34 -10:00
2019-01-25 13:07:03 -10:00
2019-01-26 12:42:41 -08:00
2019-01-19 07:26:16 +12:00
2019-01-05 11:23:17 -08:00
2019-01-25 12:57:09 -10:00
2018-12-29 13:03:29 -08:00
2018-12-24 12:06:56 +01:00
2019-01-01 13:24:31 -08:00
2019-01-26 15:03:43 -08:00
2019-01-22 20:54:00 -05:00
2018-12-31 13:06:30 -08:00
2018-12-28 20:54:57 -08:00
2019-01-18 12:58:20 +01:00
2019-01-28 22:53:09 -08:00
2019-01-25 12:58:40 -10:00
2018-12-29 13:40:29 -08:00