git.openpandora.org
/
pandora-kernel.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
7263287
)
tty: n_gsm: improper skb_pull() use was leaking framed data
author
Russ Gorby
<russ.gorby@intel.com>
Tue, 14 Jun 2011 20:23:29 +0000
(13:23 -0700)
committer
Greg Kroah-Hartman
<gregkh@suse.de>
Thu, 16 Jun 2011 19:00:15 +0000
(12:00 -0700)
gsm_dlci_data_output_framed() was doing:
memcpy(dp, skb_pull(dlci->skb, len), len);
The problem is skb_pull() returns the post-increment data ptr
so the first chunk of dlci->skb->data is leaked.
Signed-off-by: Russ Gorby <russ.gorby@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
No differences found