From: Davi Arnaut <davi.arnaut@gmail.com>
Date: Fri, 3 Feb 2006 11:04:46 +0000 (-0800)
Subject: [PATCH] Fix keyctl usage of strnlen_user()
X-Git-Tag: v2.6.16-rc3~227
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6d94074f0804143eac6bce72dc04447c0040e7d8;p=pandora-kernel.git

[PATCH] Fix keyctl usage of strnlen_user()

In the small window between strnlen_user() and copy_from_user() userspace
could alter the terminating `\0' character.

Signed-off-by: Davi Arnaut <davi.arnaut@gmail.com>
Cc: David Howells <dhowells@redhat.com>
Cc: <stable@kernel.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
---

Reading git-diff-tree failed