wifipineapple-openwrt

mirror of https://github.com/hak5/wifipineapple-openwrt.git synced 2025-10-29 16:57:19 +00:00

History

Felix Fietkau edc8daeffe kernel: crashlog: Avoid out-of-bounds write

vsnprintf returns the number of chars that would have been written, not
the actual number of chars written. This can lead to crashlog_buf->len
being too big which in turn can lead to get_maxlen() returning negative
numbers. The length argument of kmsg_dump_get_buffer will be casted to
a size_t which makes a negative input a big positive number allowing
kmsg_dump_get_buffer to write out of bounds.

Fix this by using vscnprintf which returns the actually written number
of chars.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37820 3c298f89-4303-0410-b956-a3cf2f4a3e73

2013-08-21 20:59:25 +00:00

base-files

[base-files/generic] update the /init file to start /sbin/init

2013-03-13 18:11:13 +00:00

files

kernel: drop dead pwm code

2013-08-18 01:25:41 +00:00

image

rename target/linux/generic-2.6 to generic

2010-06-26 20:42:58 +00:00

patches-3.3

kernel: crashlog: Avoid out-of-bounds write