[B.A.T.M.A.N.] bat_socket_read missing checks

Paul pawlkt at gmail.com
Sat Dec 10 15:01:55 CET 2011


Writing a icmp_packet_rr and then reading icmp_packet can lead to kernel
memory corruption, if __user *buf is just below TASK_SIZE.

-- 
Regards,
Paul


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch.txt
URL: <http://lists.open-mesh.org/pipermail/b.a.t.m.a.n/attachments/20111210/730e2622/attachment.txt>


More information about the B.A.T.M.A.N mailing list