Re: [PATCH][2.5] USB core/config.c == memory corruption (resend)

From: Zwane Mwaikambo (zwane@holomorphy.com)
Date: Mon Nov 18 2002 - 04:19:23 EST

Next message: Michael Knigge: "2.4.xx: 8139 isn't working"
Previous message: Andrew Morton: "scsi in 2.5.48"
In reply to: Zwane Mwaikambo: "[PATCH][2.5] USB core/config.c == memory corruption (resend)"
Next in thread: Greg KH: "Re: [PATCH][2.5] USB core/config.c == memory corruption (resend)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I got larted on the grounds that i write lame changelogs so here we go
again :}

parse_interface allocates the incorrect storage size for additional
altsettings (new buffer) leading to a BUG being triggered in
mm/slab.c:1453 when we do the memcpy from the old buffer to the new
buffer (writing beyond new buffer).

Zwane

-- function.linuxpower.ca

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/

Next message: Michael Knigge: "2.4.xx: 8139 isn't working"
Previous message: Andrew Morton: "scsi in 2.5.48"
In reply to: Zwane Mwaikambo: "[PATCH][2.5] USB core/config.c == memory corruption (resend)"
Next in thread: Greg KH: "Re: [PATCH][2.5] USB core/config.c == memory corruption (resend)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Sat Nov 23 2002 - 22:00:21 EST