drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when
packet-per-buffer mode is used, allows local users to cause a denial of
service (NULL pointer dereference and system crash) or possibly have
unknown other impact via an unspecified ioctl associated with receiving an
ISO packet that contains zero in the payload-length field.
Updated: 2015-10-17 03:33:43 UTC (commit 10086)