Searched hist:"6 d1cfe3f" (Results 1 – 2 of 2) sorted by relevance
| /openbmc/linux/net/ipv4/ |
| H A D | raw.c | 6d1cfe3f Mon Sep 19 19:55:30 CDT 2005 Mark J Cox <mjc@redhat.com> [PATCH] raw_sendmsg DoS on 2.6
Fix unchecked __get_user that could be tricked into generating a
memory read on an arbitrary address. The result of the read is not
returned directly but you may be able to divine some information about
it, or use the read to cause a crash on some architectures by reading
hardware state. CAN-2004-2492.
Fix from Al Viro, ack from Dave Miller.
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
6d1cfe3f Mon Sep 19 19:55:30 CDT 2005 Mark J Cox <mjc@redhat.com> [PATCH] raw_sendmsg DoS on 2.6
Fix unchecked __get_user that could be tricked into generating a
memory read on an arbitrary address. The result of the read is not
returned directly but you may be able to divine some information about
it, or use the read to cause a crash on some architectures by reading
hardware state. CAN-2004-2492.
Fix from Al Viro, ack from Dave Miller.
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
|
| /openbmc/linux/net/ipv6/ |
| H A D | raw.c | 6d1cfe3f Mon Sep 19 19:55:30 CDT 2005 Mark J Cox <mjc@redhat.com> [PATCH] raw_sendmsg DoS on 2.6
Fix unchecked __get_user that could be tricked into generating a
memory read on an arbitrary address. The result of the read is not
returned directly but you may be able to divine some information about
it, or use the read to cause a crash on some architectures by reading
hardware state. CAN-2004-2492.
Fix from Al Viro, ack from Dave Miller.
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
6d1cfe3f Mon Sep 19 19:55:30 CDT 2005 Mark J Cox <mjc@redhat.com> [PATCH] raw_sendmsg DoS on 2.6
Fix unchecked __get_user that could be tricked into generating a
memory read on an arbitrary address. The result of the read is not
returned directly but you may be able to divine some information about
it, or use the read to cause a crash on some architectures by reading
hardware state. CAN-2004-2492.
Fix from Al Viro, ack from Dave Miller.
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
|