Dan Carpenter 819a100846 mISDN: array underflow in open_bchannel()
There are two channels here.  User space starts counting channels at one
but in the kernel we start at zero.  If the user passes in a zero
channel that's invalid and could lead to memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-03-27 22:42:32 -04:00
..
2012-02-21 09:04:01 -08:00
2012-02-21 09:04:01 -08:00
2011-11-02 14:15:41 +01:00
2008-08-02 16:28:20 +02:00