29 Apr
2013
29 Apr
'13
7:06 a.m.
On Sunday, April 28, 2013 00:01:32 Antonio Quartulli wrote:
On Sat, Apr 27, 2013 at 04:22:28 +0800, Marek Lindner wrote:
batadv_param_set_ra() strips the trailing '\n' from the supplied string buffer without checking the length of the buffer first. This patches avoids random memory access and associated potential crashes.
Reported-by: Sasha Levin sasha.levin@oracle.com Signed-off-by: Marek Lindner lindner_marek@yahoo.de
Thank you for fixing this!
Please, merge this patch in maint.
Applied in revision aa7d19a.
Regards, Marek