lkml.org 
[lkml]   [2015]   [Dec]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: [PATCH] wan/x25: Fix use-after-free in x25_asy_open_tty()
From
From: Peter Hurley <peter@hurleysoftware.com>
Date: Fri, 27 Nov 2015 14:18:39 -0500

> The N_X25 line discipline may access the previous line discipline's closed
> and already-freed private data on open [1].
>
> The tty->disc_data field _never_ refers to valid data on entry to the
> line discipline's open() method. Rather, the ldisc is expected to
> initialize that field for its own use for the lifetime of the instance
> (ie. from open() to close() only).
...
> Reported-and-tested-by: Sasha Levin <sasha.levin@oracle.com>
> Cc: <stable@vger.kernel.org>
> Signed-off-by: Peter Hurley <peter@hurleysoftware.com>

Applied, thanks.


\
 
 \ /
  Last update: 2015-12-01 21:21    [W:0.348 / U:0.004 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site