openwrt

mirror of https://github.com/openwrt/openwrt.git synced 2025-02-03 01:31:07 +00:00

History

Felix Fietkau 3848e6a246 kernel: crashlog: Avoid out-of-bounds write

vsnprintf returns the number of chars that would have been written, not
the actual number of chars written. This can lead to crashlog_buf->len
being too big which in turn can lead to get_maxlen() returning negative
numbers. The length argument of kmsg_dump_get_buffer will be casted to
a size_t which makes a negative input a big positive number allowing
kmsg_dump_get_buffer to write out of bounds.

Fix this by using vscnprintf which returns the actually written number
of chars.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 37820

2013-08-21 20:59:25 +00:00

base-files

update the /init file to start /sbin/init

2013-03-13 18:11:13 +00:00

files

kernel: drop dead pwm code

2013-08-18 01:25:41 +00:00

image

rename target/linux/generic-2.6 to generic

2010-06-26 20:42:58 +00:00

patches-3.3

kernel: crashlog: Avoid out-of-bounds write