kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-16 22:39:48 +00:00
Code Issues Releases Packages Activity
linux/fs/ncpfs
History
Dan Carpenter 13a0dfcedb staging: ncpfs: memory corruption in ncp_read_kernel() 
commit 4c41aa24ba upstream.

If the server is malicious then *bytes_read could be larger than the
size of the "target" buffer.  It would lead to memory corruption when we
do the memcpy().

Reported-by: Dr Silvio Cesare of InfoSect <Silvio Cesare <silvio.cesare@gmail.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[carnil: backport to 4.9: Files renamed from drivers/staging/ncpfs/ncplib_kernel.c
 to fs/ncpfs/ncplib_kernel.c]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2018-06-16 22:21:33 +01:00
..
dir.c move d_rcu from overlapping d_child to overlapping d_alias 2015-01-15 10:44:58 +00:00
file.c ncpfs: convert PPRINTK to ncp_vdbg 2014-04-08 16:48:52 -07:00
getopt.c fs/ncpfs/getopt.c: replace simple_strtoul by kstrtoul 2014-06-04 16:54:21 -07:00
getopt.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
inode.c fs: Give dentry to inode_change_ok() instead of inode 2017-02-23 03:53:52 +00:00
ioctl.c ncpfs: return proper error from NCP_IOC_SETROOT ioctl 2015-01-15 10:43:51 +00:00
Kconfig fs/Kconfig: move the rest of ncpfs out 2009-01-22 13:16:01 +03:00
Makefile fs: change to new flag variable 2011-03-17 14:02:57 +01:00
mmap.c ncpfs: convert DPRINTK/DDPRINTK to ncp_dbg 2014-04-08 16:48:52 -07:00
ncp_fs.h ncpfs: remove now unused PRINTK macro 2014-04-08 16:48:52 -07:00
ncp_fs_i.h move internal-only parts of ncpfs headers to fs/ncpfs 2011-01-12 20:03:43 -05:00
ncp_fs_sb.h Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2014-04-12 17:31:22 -07:00
ncplib_kernel.c staging: ncpfs: memory corruption in ncp_read_kernel() 2018-06-16 22:21:33 +01:00
ncplib_kernel.h move d_rcu from overlapping d_child to overlapping d_alias 2015-01-15 10:44:58 +00:00
ncpsign_kernel.c move internal-only parts of ncpfs headers to fs/ncpfs 2011-01-12 20:03:43 -05:00
ncpsign_kernel.h move internal-only parts of ncpfs headers to fs/ncpfs 2011-01-12 20:03:43 -05:00
sock.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2014-04-12 17:31:22 -07:00
symlink.c ncpfs: convert DPRINTK/DDPRINTK to ncp_dbg 2014-04-08 16:48:52 -07:00