git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 08ed584) | patch
net: fix /proc/net/snmp as memory corruptor
authorEric Dumazet <dada1@cosmosbay.com>
Tue, 11 Nov 2008 05:43:08 +0000 (21:43 -0800)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 20 Nov 2008 22:54:48 +0000 (14:54 -0800)
commit861ea9ffa58a2c2cd55bc87b59e8eb77fb635b28
tree46568ca92dc0d64a757dc6059940973dc27dd9e5tree | snapshot
parent08ed5844d41cdd0b8576de8b4b7036b0adbf1688commit | diff
net: fix /proc/net/snmp as memory corruptor

commit b971e7ac834e9f4bda96d5a96ae9abccd01c1dd8 upstream.

icmpmsg_put() can happily corrupt kernel memory, using a static
table and forgetting to reset an array index in a loop.

Remove the static array since its not safe without proper locking.

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: Eric Dumazet <dada1@cosmosbay.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/ipv4/proc.c diff | blob | history
Pandora Kernel Repository