[PATCH] Fix keyctl usage of strnlen_user()
authorDavi Arnaut <davi.arnaut@gmail.com>
Fri, 3 Feb 2006 11:04:46 +0000 (03:04 -0800)
committerLinus Torvalds <torvalds@g5.osdl.org>
Fri, 3 Feb 2006 16:32:10 +0000 (08:32 -0800)
commit6d94074f0804143eac6bce72dc04447c0040e7d8
tree2833a03682e12d81d4bd849435cd9f95e64e9350
parent353368dffb56b066cbe00264581a56caf0241b29
[PATCH] Fix keyctl usage of strnlen_user()

In the small window between strnlen_user() and copy_from_user() userspace
could alter the terminating `\0' character.

Signed-off-by: Davi Arnaut <davi.arnaut@gmail.com>
Cc: David Howells <dhowells@redhat.com>
Cc: <stable@kernel.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
security/keys/keyctl.c