24 Jul
2023
24 Jul
'23
10:16 a.m.
Hi!
From: hackyzh002 hackyzh002@gmail.com
[ Upstream commit f828b681d0cd566f86351c0b913e6cb6ed8c7b9c ]
The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uninitialized memory to be referenced later
I only got the first patch of the series via lkml, rest seems to have been lost somewhere :-(.
Best regards, Pavel
--
People of Russia, stop Putin before his war on Ukraine escalates.