Commit a3e3dd9f authored Oct 11, 2013 by Zaheerulla Meer

msm: ipc: Possible memory corruption due to Sign Conversion



msm_ipc_router_skb_to_buf() takes an unsigned argument and assigns the
same to a signed local variable. This might cause issues when the value
of the argument is too high.

Change the datatype of the local variable to unsigned.

CRs-Fixed: 550606
Change-Id: I257a095681dd82fba05367fd6faf25820e95c719
Signed-off-by: Zaheerulla Meer <zmeer@codeaurora.org>

parent 8430a84d

arch/arm/mach-msm/ipc_router.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -434,7 +434,7 @@ static void msm_ipc_router_skb_to_buf(struct sk_buff_head skb_head,
		unsigned int len)
		{
		struct sk_buff *temp;
		int offset = 0, buf_len = 0, copy_len;
		unsigned int offset = 0, buf_len = 0, copy_len;
		void *buf;

		if (!skb_head) {