Revision 8097110d179b874d91c6495330c2b96c991e8c6e authored by Cliff Wickman on 24 June 2008, 17:20:06 UTC, committed by Tony Luck on 24 June 2008, 17:20:06 UTC
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7 "security hole in sn2_ptc_proc_write" didn't take into account the case where count==0 (which results in a buffer underrun when adding the trailing '\0'). Thanks to Andi Kleen for pointing this out. Signed-off-by: Cliff Wickman <cpw@sgi.com> Signed-off-by: Tony Luck <tony.luck@intel.com>
1 parent 2826f8c
| File | Mode | Size |
|---|---|---|
| netfilter | ||
| Kconfig | -rw-r--r-- | 5.6 KB |
| Makefile | -rw-r--r-- | 1.4 KB |
| addrconf.c | -rw-r--r-- | 107.9 KB |
| addrconf_core.c | -rw-r--r-- | 2.4 KB |
| addrlabel.c | -rw-r--r-- | 12.6 KB |
| af_inet6.c | -rw-r--r-- | 25.5 KB |
| ah6.c | -rw-r--r-- | 13.1 KB |
| anycast.c | -rw-r--r-- | 11.6 KB |
| datagram.c | -rw-r--r-- | 17.3 KB |
| esp6.c | -rw-r--r-- | 13.6 KB |
| exthdrs.c | -rw-r--r-- | 20.1 KB |
| exthdrs_core.c | -rw-r--r-- | 3.2 KB |
| fib6_rules.c | -rw-r--r-- | 7.4 KB |
| icmp.c | -rw-r--r-- | 21.5 KB |
| inet6_connection_sock.c | -rw-r--r-- | 6.3 KB |
| inet6_hashtables.c | -rw-r--r-- | 6.6 KB |
| ip6_fib.c | -rw-r--r-- | 32.5 KB |
| ip6_flowlabel.c | -rw-r--r-- | 17.2 KB |
| ip6_input.c | -rw-r--r-- | 7.3 KB |
| ip6_output.c | -rw-r--r-- | 37.1 KB |
| ip6_tunnel.c | -rw-r--r-- | 35.3 KB |
| ip6mr.c | -rw-r--r-- | 36.1 KB |
| ipcomp6.c | -rw-r--r-- | 10.8 KB |
| ipv6_sockglue.c | -rw-r--r-- | 24.9 KB |
| mcast.c | -rw-r--r-- | 63.2 KB |
| mip6.c | -rw-r--r-- | 13.1 KB |
| ndisc.c | -rw-r--r-- | 45.2 KB |
| netfilter.c | -rw-r--r-- | 4.3 KB |
| proc.c | -rw-r--r-- | 9.2 KB |
| protocol.c | -rw-r--r-- | 2.0 KB |
| raw.c | -rw-r--r-- | 30.7 KB |
| reassembly.c | -rw-r--r-- | 18.8 KB |
| route.c | -rw-r--r-- | 66.2 KB |
| sit.c | -rw-r--r-- | 24.0 KB |
| syncookies.c | -rw-r--r-- | 7.7 KB |
| sysctl_net_ipv6.c | -rw-r--r-- | 3.0 KB |
| tcp_ipv6.c | -rw-r--r-- | 55.1 KB |
| tunnel6.c | -rw-r--r-- | 4.3 KB |
| udp.c | -rw-r--r-- | 25.6 KB |
| udp_impl.h | -rw-r--r-- | 1.4 KB |
| udplite.c | -rw-r--r-- | 3.2 KB |
| xfrm6_input.c | -rw-r--r-- | 2.9 KB |
| xfrm6_mode_beet.c | -rw-r--r-- | 2.9 KB |
| xfrm6_mode_ro.c | -rw-r--r-- | 2.3 KB |
| xfrm6_mode_transport.c | -rw-r--r-- | 2.3 KB |
| xfrm6_mode_tunnel.c | -rw-r--r-- | 3.1 KB |
| xfrm6_output.c | -rw-r--r-- | 2.1 KB |
| xfrm6_policy.c | -rw-r--r-- | 7.5 KB |
| xfrm6_state.c | -rw-r--r-- | 4.5 KB |
| xfrm6_tunnel.c | -rw-r--r-- | 9.1 KB |
Computing file changes ...
