]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
char: lp: fix possible integer overflow in lp_setup()
authorWilly Tarreau <w@1wt.eu>
Tue, 16 May 2017 17:18:55 +0000 (19:18 +0200)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Tue, 20 Jun 2017 10:17:46 +0000 (12:17 +0200)
commitb9c7fe74701f0674b44e665f2b4b16ebda42a4d1
treef4f4c609723a063c0bf00683c93f468906373dd5
parent420cdfbdd8a8c98a10b4223a63283b00a55a7d76
char: lp: fix possible integer overflow in lp_setup()

BugLink: http://bugs.launchpad.net/bugs/1694621
commit 3e21f4af170bebf47c187c1ff8bf155583c9f3b1 upstream.

The lp_setup() code doesn't apply any bounds checking when passing
"lp=none", and only in this case, resulting in an overflow of the
parport_nr[] array. All versions in Git history are affected.

Reported-By: Roee Hay <roee.hay@hcl.com>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
drivers/char/lp.c