Doug / smarc-fsl-linux-kernel

Download as
Browse Code ยป

Commit 0597d1b99fcfc2c0eada09a698f85ed413d4ba84

Authored by Oliver Hartkopp
Committed by David S. Miller
1 parent 6c4f199411
Exists in master and in 7 other branches imx_3.0.35_4.1.0, imx_3.10.17_1.0.1_ga, imx_3.10.53_1.1.0_ga, imx_3.14.28_1.0.0_ga, smarc-imx_3.10.53_1.1.0_ga, smarc-imx_3.14.28_1.0.0_ga, smarc-l5.0.0_1.0.0-ga

can-bcm: fix minor heap overflow 

On 64-bit platforms the ASCII representation of a pointer may be up to 17
bytes long. This patch increases the length of the buffer accordingly.

http://marc.info/?l=linux-netdev&m=128872251418192&w=2

Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
CC: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

... ... @@ -125,7 +125,7 @@
125 125 struct list_head tx_ops;
126 126 unsigned long dropped_usr_msgs;
127 127 struct proc_dir_entry *bcm_proc_read;
128   - char procname [9]; /* pointer printed in ASCII with ]; /* pointer printed in ASCII with \0 */ */
  128 + char procname [20]; /* pointer printed in ASCII with ]; /* pointer printed in ASCII with \0 */ */
129 129 };
130 130  
131 131 static inline struct bcm_sock *bcm_sk(const struct sock *sk)