• Andrew Morton's avatar
    [PATCH] early_serial_setup array bounds check · 669e7461
    Andrew Morton authored
    From: Bjorn Helgaas <bjorn.helgaas@hp.com>
    
    early_serial_setup() doesn't validate the array index, so a caller could
    corrupt memory after serial8250_ports[] by supplying a value of port->line
    that's too large.
    
    I haven't seen a failure related to this, but it seems fragile to rely on
    callers to know how many ports the driver supports.
    669e7461
8250.c 55.3 KB