| commit | 8097110d179b874d91c6495330c2b96c991e8c6e | |
| author | Cliff Wickman <cpw@sgi.com> | |
| Tue, 24 Jun 2008 17:20:06 +0000 (24 10:20 -0700) | ||
| committer | Tony Luck <tony.luck@intel.com> | |
| Tue, 24 Jun 2008 17:20:06 +0000 (24 10:20 -0700) | ||
| tree | 8ca93d3c7758953f468e5b25708d68dfd732b307 | treesnapshot (tar.gz zip) |
| parent | 2826f8c0f4c97b7db33e2a680f184d828eb7a785 | commitdiff |
[IA64] Handle count==0 in sn2_ptc_proc_write()
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7
"security hole in sn2_ptc_proc_write" didn't take into account
the case where count==0 (which results in a buffer underrun
when adding the trailing '\0'). Thanks to Andi Kleen for
pointing this out.
Signed-off-by: Cliff Wickman <cpw@sgi.com>
Signed-off-by: Tony Luck <tony.luck@intel.com>
The fix applied in e0c6d97c65e0784aade7e97b9411f245a6c543e7
"security hole in sn2_ptc_proc_write" didn't take into account
the case where count==0 (which results in a buffer underrun
when adding the trailing '\0'). Thanks to Andi Kleen for
pointing this out.
Signed-off-by: Cliff Wickman <cpw@sgi.com>
Signed-off-by: Tony Luck <tony.luck@intel.com>
| arch/ia64/sn/kernel/sn2/sn2_smp.c | diffblobblamehistory |