diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2008-06-20 20:10:04 -0400 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2008-06-20 20:10:04 -0400 |
| commit | b732d9680b7a2968823851f1163507ad9c45c8cb (patch) | |
| tree | d4584316d00a021d3d54052676a870c8b2999f23 | |
| parent | a744e0160ac5804b763449aa34d3991dc21af0be (diff) | |
| parent | e0c6d97c65e0784aade7e97b9411f245a6c543e7 (diff) | |
Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux-2.6
* 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux-2.6:
[IA64] SN2: security hole in sn2_ptc_proc_write
| -rw-r--r-- | arch/ia64/sn/kernel/sn2/sn2_smp.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/arch/ia64/sn/kernel/sn2/sn2_smp.c b/arch/ia64/sn/kernel/sn2/sn2_smp.c index 49d3120415eb..6dd886c5d860 100644 --- a/arch/ia64/sn/kernel/sn2/sn2_smp.c +++ b/arch/ia64/sn/kernel/sn2/sn2_smp.c | |||
| @@ -512,6 +512,8 @@ static ssize_t sn2_ptc_proc_write(struct file *file, const char __user *user, si | |||
| 512 | int cpu; | 512 | int cpu; |
| 513 | char optstr[64]; | 513 | char optstr[64]; |
| 514 | 514 | ||
| 515 | if (count > sizeof(optstr)) | ||
| 516 | return -EINVAL; | ||
| 515 | if (copy_from_user(optstr, user, count)) | 517 | if (copy_from_user(optstr, user, count)) |
| 516 | return -EFAULT; | 518 | return -EFAULT; |
| 517 | optstr[count - 1] = '\0'; | 519 | optstr[count - 1] = '\0'; |