Revision 8097110d179b874d91c6495330c2b96c991e8c6e authored by Cliff Wickman on 24 June 2008, 17:20:06 UTC, committed by Tony Luck on 24 June 2008, 17:20:06 UTC
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7
"security hole in sn2_ptc_proc_write" didn't take into account
the case where count==0 (which results in a buffer underrun
when adding the trailing '\0').  Thanks to Andi Kleen for
pointing this out.

Signed-off-by: Cliff Wickman <cpw@sgi.com>
Signed-off-by: Tony Luck <tony.luck@intel.com>
1 parent 2826f8c
History
File Mode Size
Makefile -rw-r--r-- 408 bytes
fc.c -rw-r--r-- 3.3 KB
fddi.c -rw-r--r-- 5.7 KB
hippi.c -rw-r--r-- 6.0 KB
p8022.c -rw-r--r-- 1.9 KB
p8023.c -rw-r--r-- 1.6 KB
psnap.c -rw-r--r-- 3.5 KB
tr.c -rw-r--r-- 15.2 KB

back to top