Messages in this thread | | | Date | Wed, 20 Apr 2016 10:23:04 -0300 | From | Arnaldo Carvalho de Melo <> | Subject | Re: [PATCH] perf buildid: fix off-by-one in write_buildid() |
| |
Em Wed, Apr 20, 2016 at 03:36:22PM +0300, Adrian Hunter escreveu: > On 19/04/16 16:40, Arnaldo Carvalho de Melo wrote: > > Em Tue, Apr 19, 2016 at 11:17:27AM +0300, Andrey Ryabinin escreveu: > >> write_buildid() increments 'name_len' with intention to take into account > >> trailing zero byte. However, 'name_len' was already incremented in > >> machine__write_buildid_table() before. > >> So this leads to out-of-bounds read in do_write(): > > > > Adrian, can you please take a look at the db-export improvements made in > > this series? It'd be good to have your ack for those, > > You mean the patches from Chris Phlipot - yes I'll look at them.
Yeah, thanks,
- Arnaldo
| |