linux/drivers/isdn
Chen Gang f39479363e drivers/isdn: checkng length to be sure not memory overflow
sizeof (cmd.parm.cmsg.para) is 50 (MAX_CAPI_PARA_LEN).
  sizeof (cmd.parm) is 80+, but less than 100.
  strlen(msg) may be more than 80+ (Modem-Commandbuffer, less than 255).
    isdn_tty_send_msg is called by isdn_tty_parse_at
    the relative parameter is m->mdmcmd (atemu *m)
    the relative command may be "+M..."

  so need check the length to be sure not memory overflow.
    cmd.parm is a union, and need keep original valid buffer length no touch

Signed-off-by: Chen Gang <gang.chen@asianux.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-03-08 00:35:44 -05:00
..
act2000
capi tty: Added a CONFIG_TTY option to allow removal of TTY 2013-01-18 16:15:27 -08:00
divert isdn/divert: fix readability damage 2013-01-21 17:36:25 -05:00
gigaset tty/serial patches for 3.9-rc1 2013-02-21 13:41:04 -08:00
hardware Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2013-02-26 20:16:07 -08:00
hisax isdn: hisax: add missing usb_free_urb 2013-02-26 17:33:56 -05:00
hysdn new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
i4l drivers/isdn: checkng length to be sure not memory overflow 2013-03-08 00:35:44 -05:00
icn
isdnloop isdnloop: fix and simplify isdnloop_init() 2012-08-03 16:53:22 -07:00
mISDN hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
pcbit isdn: Fix typo in drivers/isdn 2012-11-09 17:10:16 -05:00
sc
Kconfig tty: Added a CONFIG_TTY option to allow removal of TTY 2013-01-18 16:15:27 -08:00
Makefile