lkml.org 
[lkml]   [2009]   [Jul]   [6]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
DateMon, 06 Jul 2009 13:08:41 -0700 (PDT)
SubjectRe: PROBLEM: tun/tap crashes if open() /dev/net/tun and then poll() it.
FromDavid Miller <>
From: Mariusz Kozlowski <m.kozlowski@tuxland.pl>
Date: Mon, 6 Jul 2009 07:48:35 +0200

> Fix NULL pointer dereference in tun_chr_pool() introduced by
> commit 33dccbb050bbe35b88ca8cf1228dcf3e4d4b3554 and triggered
> by this code:
>
> int fd;
> struct pollfd pfd;
> fd = open("/dev/net/tun", O_RDWR);
> pfd.fd = fd;
> pfd.events = POLLIN | POLLOUT;
> poll(&pfd, 1, 0);
>
> Reported-by: Eugene Kapun <abacabadabacaba@gmail.com>
> Signed-off-by: Mariusz Kozlowski <m.kozlowski@tuxland.pl>

Applied, thanks!


\
 
 \ /
  Last update: 2009-07-06 22:11    [from the cache]
©2003-2009