Re: [PATCH][2.5] USB core/config.c == memory corruption (resend)

Zwane Mwaikambo (zwane@holomorphy.com)
Mon, 18 Nov 2002 04:19:23 -0500 (EST)


I got larted on the grounds that i write lame changelogs so here we go
again :}

parse_interface allocates the incorrect storage size for additional
altsettings (new buffer) leading to a BUG being triggered in
mm/slab.c:1453 when we do the memcpy from the old buffer to the new
buffer (writing beyond new buffer).

Zwane

-- 
function.linuxpower.ca

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/