git.ipfire.org Git - thirdparty/kernel/stable.git/commit

author	Dan Carpenter <error27@gmail.com>
	Thu, 3 Mar 2011 16:56:06 +0000 (17:56 +0100)
committer	Willy Tarreau <w@1wt.eu>
	Sat, 30 Apr 2011 14:53:12 +0000 (16:53 +0200)
commit	a88dfcc1c22750be6ea3283ae08e20019c876234
tree	b96b2929eb32997ee9d671e24f3dd2031cdaf3cc	tree
parent	0c5e0cbbc95f6503eeac88ba16afda77fc974726	commit \| diff

keyboard: integer underflow bug

commit b652277b09d3d030cb074cc6a98ba80b34244c03 upstream.

The "ct" variable should be an unsigned int. Both struct kbdiacrs
->kb_cnt and struct kbd_data ->accent_table_size are unsigned ints.

Making it signed causes a problem in KBDIACRUC because the user could
set the signed bit and cause a buffer overflow.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>