A missing type cast results in writing way beyond the end of a kzalloc()'d memory segment resulting in slab corruption. But it seems like the better solution is to define ->recv_msg_slots as a 'void *' rather than a 'struct xpc_notify_mq_msg_uv *' and add the type cast. Signed-off-by: Dean Nelson <dcn@sgi.com> Cc: <stable@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> |
||
|---|---|---|
| .. | ||
| c2port | ||
| eeprom | ||
| hdpuftrs | ||
| ibmasm | ||
| sgi-gru | ||
| sgi-xp | ||
| atmel_pwm.c | ||
| atmel_tclib.c | ||
| atmel-ssc.c | ||
| enclosure.c | ||
| hpilo.c | ||
| hpilo.h | ||
| ics932s401.c | ||
| ioc4.c | ||
| Kconfig | ||
| kgdbts.c | ||
| lkdtm.c | ||
| Makefile | ||
| phantom.c | ||
| tifm_7xx1.c | ||
| tifm_core.c | ||