Nicolas de Pesloüan 79236680bd bonding: fix a buffer overflow in bonding_show_queue_id. ...

The test for buffer overflow ensures we have room for 6 more bytes.
sprintf, called with %s:%d, slave->dev->name, slave->queue_id may yield
far more than 6 bytes.

The correct test is res > (PAGE_SIZE - IFNAMSIZ - 6) .

Signed-off-by: Nicolas de Pesloüan <nicolas.2p.debian@free.fr>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-07-14 18:24:54 -07:00

..

bond_3ad.c

bond_3ad.c avoid possible null deref

2009-12-26 20:24:46 -08:00

bond_3ad.h

Remove duplicate slow protocol define in bond_3ad.h

2009-05-09 13:15:49 -07:00

bond_alb.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2010-07-07 15:59:38 -07:00

bond_alb.h

Convert bonding timers to workqueues

2007-10-23 20:32:00 -04:00

bond_ipv6.c

ipv6: convert idev_list to list macros

2010-03-20 15:45:09 -07:00

bond_main.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2010-07-07 15:59:38 -07:00

bond_sysfs.c

bonding: fix a buffer overflow in bonding_show_queue_id.

2010-07-14 18:24:54 -07:00

bonding.h

bonding: allow user-controlled output slave selection

2010-06-05 02:23:17 -07:00

Makefile

bonding: send IPv6 neighbor advertisement on failover

2008-11-06 00:49:37 -05:00