Re: [patch -longterm v2] V4L/DVB: v4l2-ioctl: integer overflow in

Dan Carpenter
2012-01-05T17:56:20Z

[-- Attachment #1: Type: text/plain, Size: 727 bytes --]

On Thu, Jan 05, 2012 at 08:43:58AM -0800, Greg KH wrote:
> On Thu, Jan 05, 2012 at 09:28:22AM +0300, Dan Carpenter wrote:
> > If p->count is too high the multiplication could overflow and
> > array_size would be lower than expected. Mauro and Hans Verkuil
> > suggested that we cap it at 1024. That comes from the maximum
> > number of controls with lots of room for expantion.
> >
> > $ grep V4L2_CID include/linux/videodev2.h | wc -l
> > 211
> >
> > Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
>
> So this patch is only for 2.6.32? But the original needs to get into
> Linus's tree first (which is what I'm guessing the other patch you sent
> is, right?)

Yep.

regards,
dan carpenter

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]