27 Apr
2013
27 Apr
'13
4:01 p.m.
On Sat, Apr 27, 2013 at 04:22:28 +0800, Marek Lindner wrote:
batadv_param_set_ra() strips the trailing '\n' from the supplied string buffer without checking the length of the buffer first. This patches avoids random memory access and associated potential crashes.
Reported-by: Sasha Levin sasha.levin@oracle.com Signed-off-by: Marek Lindner lindner_marek@yahoo.de
Thank you for fixing this!
Please, merge this patch in maint.
Cheers,
--
Antonio Quartulli
..each of us alone is worth nothing..
Ernesto "Che" Guevara