Re: Upcoming 4.18s - SECURITY ISSUES

Marc-Christian Petersen <[email protected]> Tue, 11 Jan 2005 12:57:46 +0100

Newsgroups	gmane.linux.wolk.devel
Organization	Working Overloaded Linux Kernel
Message-ID	<200501111257.46772@WOLK>

On Tuesday 11 January 2005 12:42, Stefan Foerster wrote:

Hi Stefan,

> I don't see CAN-2004-1137 (IGMP stuff) and CAN-2004-1333
> (vc_resize()).

igmp is not valid for wolk, and vc_resize is in, but misses the can number, 
I'll add it.

o   fixed:    make sure VC resizing fits in s16


now it reads like this:

o   fixed:    CAN-2004-1333: Integer overflow in the vc_resize function allows
                local users to cause a denial of service (kernel crash) via a
                short new screen value, which leads to a buffer overflow. Make
                sure VC resizing fits in s16.

ciao, Marc


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
WOLK - Working Overloaded Linux Kernel
[email protected]
https://lists.sourceforge.net/lists/listinfo/wolk-devel