Revision 8097110d179b874d91c6495330c2b96c991e8c6e authored by Cliff Wickman on 24 June 2008, 17:20:06 UTC, committed by Tony Luck on 24 June 2008, 17:20:06 UTC
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7 "security hole in sn2_ptc_proc_write" didn't take into account the case where count==0 (which results in a buffer underrun when adding the trailing '\0'). Thanks to Andi Kleen for pointing this out. Signed-off-by: Cliff Wickman <cpw@sgi.com> Signed-off-by: Tony Luck <tony.luck@intel.com>
1 parent 2826f8c
| File | Mode | Size |
|---|---|---|
| Makefile | -rw-r--r-- | 149 bytes |
| fid.c | -rw-r--r-- | 4.6 KB |
| fid.h | -rw-r--r-- | 1.7 KB |
| v9fs.c | -rw-r--r-- | 7.1 KB |
| v9fs.h | -rw-r--r-- | 4.0 KB |
| v9fs_vfs.h | -rw-r--r-- | 2.2 KB |
| vfs_addr.c | -rw-r--r-- | 1.9 KB |
| vfs_dentry.c | -rw-r--r-- | 2.8 KB |
| vfs_dir.c | -rw-r--r-- | 2.9 KB |
| vfs_file.c | -rw-r--r-- | 4.7 KB |
| vfs_inode.c | -rw-r--r-- | 25.1 KB |
| vfs_super.c | -rw-r--r-- | 5.2 KB |
Computing file changes ...
