lkml.org 
[lkml]   [1999]   [Nov]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Patch for DoS attack in ipc/msg.c
Date
Scott wrote:
> (note that struct msgbuf includes one byte for
> the message text, so this should be safe)
this is the user-space visible msgbuf structure, the
actual structure is "msg_msg", defined at the beginning
of ipc/msg.c. This structure does not contain that byte.

Could you wait until Friday? I'd like to check the POSIX
standard: a zero-sized message contains a msgtype, and perhaps
someone sends zero-sized messages with a special msgtype
to recover from an overflown msgqueue?

Thanks for your bug report,
Manfred

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:54    [W:0.154 / U:0.068 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site