git.openpandora.org
/
pandora-kernel.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
7314e61
)
uml: check length in exitcode_proc_write()
author
Dan Carpenter
<dan.carpenter@oracle.com>
Tue, 29 Oct 2013 19:06:04 +0000
(22:06 +0300)
committer
Linus Torvalds
<torvalds@linux-foundation.org>
Wed, 30 Oct 2013 19:24:49 +0000
(12:24 -0700)
We don't cap the size of buffer from the user so we could write past the
end of the array here. Only root can write to this file.
Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
No differences found