Files
linux/drivers
Ben Hutchings ee9c5cfad2 niu: Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL
niu_get_ethtool_tcam_all() assumes that its output buffer is the right
size, and warns before returning if it is not.  However, the output
buffer size is under user control and ETHTOOL_GRXCLSRLALL is an
unprivileged ethtool command.  Therefore this is at least a local
denial-of-service vulnerability.

Change it to check before writing each entry and to return an error if
the buffer is already full.

Compile-tested only.

Signed-off-by: Ben Hutchings <bhutchings@solarflare.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-09-08 14:01:52 -07:00
..
2010-08-04 15:14:38 +02:00
2010-08-04 21:53:17 -07:00
2010-07-20 16:25:41 -07:00
2010-08-04 15:14:38 +02:00
2010-08-04 11:16:01 +02:00
2010-07-31 14:20:02 +01:00
2010-08-04 15:14:38 +02:00
2010-06-16 18:08:13 +02:00
2010-08-04 15:14:38 +02:00
2010-08-03 11:55:15 -04:00
2010-06-16 18:08:32 +02:00
2010-08-04 15:14:38 +02:00
2010-06-01 12:04:35 -04:00
2010-06-04 16:00:42 -04:00
2010-06-16 18:05:05 +02:00
2010-09-01 14:26:13 -07:00
2010-07-26 08:05:31 -07:00