Commit Graph

3 Commits (8733c8103bf4993f8f320bf661b4b152bd71639a)

Author SHA1 Message Date
Felix Fietkau 3848e6a246 kernel: crashlog: Avoid out-of-bounds write
vsnprintf returns the number of chars that would have been written, not
the actual number of chars written. This can lead to crashlog_buf->len
being too big which in turn can lead to get_maxlen() returning negative
numbers. The length argument of kmsg_dump_get_buffer will be casted to
a size_t which makes a negative input a big positive number allowing
kmsg_dump_get_buffer to write out of bounds.

Fix this by using vscnprintf which returns the actually written number
of chars.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 37820
2013-08-21 20:59:25 +00:00
Jonas Gorski 96f8c15a36 kernel: update linux 3.10 to 3.10 final
3.10 final is out, so refresh patches and add md5sum.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 37116
2013-07-01 13:21:06 +00:00
Jonas Gorski c0435a971e kernel: generic: add 3.10-rc1 support
Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36663
2013-05-19 18:36:15 +00:00