From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ben Hutchings Subject: Re: [patch] [IrDA]: small read past the end of array in debug code Date: Mon, 22 Apr 2013 19:02:15 +0100 Message-ID: <1366653735.4016.2.camel@bwh-desktop.uk.solarflarecom.com> References: <20130417071038.GA7923@elgon.mountain> <20130419.173329.1993060022855519678.davem@davemloft.net> <20130420203916.GA8936@mwanda> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Cc: David Miller , , , To: Dan Carpenter Return-path: Received: from webmail.solarflare.com ([12.187.104.25]:59883 "EHLO webmail.solarflare.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753536Ab3DVSCX (ORCPT ); Mon, 22 Apr 2013 14:02:23 -0400 In-Reply-To: <20130420203916.GA8936@mwanda> Sender: netdev-owner@vger.kernel.org List-ID: On Sat, 2013-04-20 at 23:39 +0300, Dan Carpenter wrote: > On Fri, Apr 19, 2013 at 05:33:29PM -0400, David Miller wrote: > > From: Dan Carpenter > > Date: Wed, 17 Apr 2013 10:10:38 +0300 > > > > > The "reason" can come from skb->data[] and it hasn't been capped so it > > > can be from 0-255 instead of just 0-6. For example in irlmp_state_dtr() > > > the code does: > > > > > > reason = skb->data[3]; > > > ... > > > irlmp_disconnect_indication(self, reason, skb); > > > > > > Also LMREASON has a couple other values which don't have entries in the > > > irlmp_reasons[] array. And 0xff is a valid reason as well which means > > > "unknown". > > > > > > So far as I can see we don't actually care about "reason" except for in > > > the debug code. > > > > > > Signed-off-by: Dan Carpenter > > > > Applied but please put the subsystem prefix outside of [] which get > > stripped by git am and other tools. I fixed it up to be "irda: ". > > > > Sorry about that. I won't do it again. > > It's weird because the prefix was cut and pasted from an earlier > commit. Also [media] and [SCSI] use square brackets in their > subsystems. I tried some experiments with "git am" and you're right > that "git am" always strips out the square bracket stuff. Odd. The -k option suppresses this behaviour, but then it will also keep [PATCH]. It's a shame there's no option to strip just \[PATCH[^]]*\] Ben. -- Ben Hutchings, Staff Engineer, Solarflare Not speaking for my employer; that's the marketing department's job. They asked us to note that Solarflare product names are trademarked.