Revision 8097110d179b874d91c6495330c2b96c991e8c6e authored by Cliff Wickman on 24 June 2008, 17:20:06 UTC, committed by Tony Luck on 24 June 2008, 17:20:06 UTC
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7
"security hole in sn2_ptc_proc_write" didn't take into account
the case where count==0 (which results in a buffer underrun
when adding the trailing '\0').  Thanks to Andi Kleen for
pointing this out.

Signed-off-by: Cliff Wickman <cpw@sgi.com>
Signed-off-by: Tony Luck <tony.luck@intel.com>
1 parent 2826f8c
History
File Mode Size
Makefile -rw-r--r-- 124 bytes
control.c -rw-r--r-- 4.9 KB
dev.c -rw-r--r-- 26.3 KB
dir.c -rw-r--r-- 38.3 KB
file.c -rw-r--r-- 36.0 KB
fuse_i.h -rw-r--r-- 14.8 KB
inode.c -rw-r--r-- 20.6 KB

back to top