Messages in this thread | | | Date | Wed, 28 Mar 2007 11:59:43 -0700 (PDT) | Subject | Re: [PATCH] DCCP: proper optlen checking in do_dccp_getsockopt() | From | David Miller <> |
| |
From: Jiri Kosina <jkosina@suse.cz> Date: Wed, 28 Mar 2007 20:49:32 +0200 (CEST)
> From: Jiri Kosina <jkosina@suse.cz> > > DCCP: proper optlen checking in do_dccp_getsockopt() > > Robert Swiecki discovered [1] a signedness bug in checking of > optlen in do_dccp_getsockopt(). This bug can allow user to > read parts of the kernel memory. > > [1] http://www.securityfocus.com/archive/1/463934/30/0/threaded
Arnaldo already sent me a more proper fix for this. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |