Skip to content
Commit 8bde9a62 authored by Xi Wang's avatar Xi Wang Committed by Greg Kroah-Hartman
Browse files

usb: usbtest: avoid integer overflow in alloc_sglist()



A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.

| alloc_sglist()
| usbtest_ioctl()

Use kmalloc_array() to avoid the overflow.

Signed-off-by: default avatarXi Wang <xi.wang@gmail.com>
Acked-by: default avatarAlan Stern <stern@rowland.harvard.edu>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent e65cdfae
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment