]> git.itanic.dy.fi Git - linux-stable/commit
irda: precedence bug in irlmp_seq_hb_idx()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 19 Oct 2015 10:16:49 +0000 (13:16 +0300)
committerSasha Levin <sasha.levin@oracle.com>
Thu, 3 Dec 2015 15:11:07 +0000 (10:11 -0500)
commit8e05f5d8ac8d0a3d386a4f582a8cadf3c0285bbc
tree27159b5b6ce08fa51ba06a45cd1d69d0a11b841a
parent628306a21a28bfad0c9caeb0328436ff34aaa809
irda: precedence bug in irlmp_seq_hb_idx()

[ Upstream commit 50010c20597d14667eff0fdb628309986f195230 ]

This is decrementing the pointer, instead of the value stored in the
pointer.  KASan detects it as an out of bounds reference.

Reported-by: "Berry Cheng 程君(成淼)" <chengmiao.cj@alibaba-inc.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
net/irda/irlmp.c