diff options
| author | Ben Hutchings <bhutchings@solarflare.com> | 2010-06-28 08:44:07 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2010-06-29 01:00:29 -0700 |
| commit | db048b69037e7fa6a7d9e95a1271a50dc08ae233 (patch) | |
| tree | 0202b5d2ed643021db2790f7fae3867d3d92a1f3 /Documentation/BUG-HUNTING | |
| parent | c22d7ac844f1cb9c6a5fd20f89ebadc2feef891b (diff) | |
ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL
On a 32-bit machine, info.rule_cnt >= 0x40000000 leads to integer
overflow and the buffer may be smaller than needed. Since
ETHTOOL_GRXCLSRLALL is unprivileged, this can presumably be used for at
least denial of service.
Signed-off-by: Ben Hutchings <bhutchings@solarflare.com>
Cc: stable@kernel.org
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'Documentation/BUG-HUNTING')
0 files changed, 0 insertions, 0 deletions