Revision 8097110d179b874d91c6495330c2b96c991e8c6e authored by Cliff Wickman on 24 June 2008, 17:20:06 UTC, committed by Tony Luck on 24 June 2008, 17:20:06 UTC
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7
"security hole in sn2_ptc_proc_write" didn't take into account
the case where count==0 (which results in a buffer underrun
when adding the trailing '\0').  Thanks to Andi Kleen for
pointing this out.

Signed-off-by: Cliff Wickman <cpw@sgi.com>
Signed-off-by: Tony Luck <tony.luck@intel.com>
1 parent 2826f8c
History
File Mode Size
Makefile -rw-r--r-- 160 bytes
checkpoint.c -rw-r--r-- 19.6 KB
commit.c -rw-r--r-- 31.2 KB
journal.c -rw-r--r-- 63.0 KB
recovery.c -rw-r--r-- 18.7 KB
revoke.c -rw-r--r-- 19.8 KB
transaction.c -rw-r--r-- 63.1 KB

back to top