ソースを参照

Revert "Staging: comedi: integer overflow in do_insnlist_ioctl()"

This reverts commit e384a41141949843899affcf51f4e6e646c1fe9f.
It's not the correct way to solve this issue.

Acked-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Greg Kroah-Hartman 13 年 前
コミット
06b446c8af
1 ファイル変更0 行追加5 行削除
  1. 0 5
      drivers/staging/comedi/comedi_fops.c

+ 0 - 5
drivers/staging/comedi/comedi_fops.c

@@ -670,11 +670,6 @@ static int do_insnlist_ioctl(struct comedi_device *dev,
 		goto error;
 	}
 
-	if (sizeof(struct comedi_insn) * insnlist.n_insns < insnlist.n_insns) {
-		ret = -EINVAL;
-		goto error;
-	}
-
 	insns =
 	    kmalloc(sizeof(struct comedi_insn) * insnlist.n_insns, GFP_KERNEL);
 	if (!insns) {