irda: Fix heap memory corruption in iriap.c
authorSamuel Ortiz <samuel@sortiz.org>
Tue, 5 Oct 2010 23:03:12 +0000 (01:03 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 9 Dec 2010 21:24:15 +0000 (13:24 -0800)
commit7d4ffa17797e86b7a17cc3fb26ab37cef6d00205
treea2e2bf9bc74e0456793374fdaa888af698c6642d
parenta1b9505e4a663cdb5bc522b9dfa5ac1d1528bae2
irda: Fix heap memory corruption in iriap.c

commit 37f9fc452d138dfc4da2ee1ce5ae85094efc3606 upstream.

While parsing the GetValuebyClass command frame, we could potentially write
passed the skb->data pointer.

Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Samuel Ortiz <samuel@sortiz.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/irda/iriap.c