]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 44e699d) | patch
Guard check in module loader against integer overflow
authorDavid Howells <dhowells@redhat.com>
Tue, 22 May 2012 14:56:13 +0000 (15:56 +0100)
committerRusty Russell <rusty@rustcorp.com.au>
Wed, 23 May 2012 12:58:53 +0000 (22:28 +0930)
commitcb73273582ccaaf7987926a0e68e9af56bdb44d0
tree94f8b1998d94080a842f94529f0d95cfe1bcc53atree | snapshot
parent44e699dccbc1c246a0433ea67bc3bfdaf837ada0commit | diff
Guard check in module loader against integer overflow

The check:

if (len < hdr->e_shoff + hdr->e_shnum * sizeof(Elf_Shdr))

may not work if there's an overflow in the right-hand side of the condition.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
kernel/module.c diff | blob | history
Linux Kernel Source Tree.