Re: [PATCH] sgi-gru: Fix kernel stack buffer overrun

From: Jack Steiner
Date: Mon Jul 20 2009 - 19:26:57 EST


On Tue, Jul 21, 2009 at 12:08:38AM +0200, Michael Buesch wrote:
> This patch fixes a kernel stack buffer overrun in the sgi-gru procfs
> interface implementation.
> The "count" parameter to options_write() is user controlled. So this bug
> can be used to write '\0' bytes to almost arbitrary places on the kernel stack.
>
> Signed-off-by: Michael Buesch <mb@xxxxxxxxx>
> Cc: stable@xxxxxxxxxx

Acked-by: Jack Steiner <steiner@xxxxxxx>


Thanks...

--- jack
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/