From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Tue, 29 Oct 2013 19:06:04 +0000 (+0300)
Subject: uml: check length in exitcode_proc_write()
X-Git-Tag: v3.2.53~5
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=02c54b6cf2b7bd1089bef485d7a81bdf0c5999d8;p=pandora-kernel.git

uml: check length in exitcode_proc_write()

commit 201f99f170df14ba52ea4c52847779042b7a623b upstream.

We don't cap the size of buffer from the user so we could write past the
end of the array here.  Only root can write to this file.

Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---

Reading git-diff-tree failed