Vasiliy Kulikov
43629f8f5e
Bluetooth: bnep: fix buffer overflow ...
Struct ca is copied from userspace. It is not checked whether the "device"
field is NULL terminated. This potentially leads to BUG() inside of
alloc_netdev_mqs() and/or information leak by creating a device with a name
made of contents of kernel stack.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
2011-02-14 12:51:33 -02:00
2011-01-11 09:58:07 -06:00
2010-11-28 10:47:19 -08:00
2011-01-07 16:58:04 -08:00
2011-01-12 00:34:49 -08:00
2010-12-20 10:32:03 -08:00
2011-02-14 12:51:33 -02:00
2011-01-06 11:33:05 -08:00
2011-01-10 16:12:00 -08:00
2011-01-04 11:57:25 -08:00
2011-01-13 10:25:24 -08:00
2011-01-14 13:25:30 -08:00
2011-01-06 11:16:54 -08:00
2011-01-13 10:05:56 -08:00
2011-01-13 10:05:56 -08:00
2010-11-22 08:16:10 -08:00
2010-12-24 15:59:06 +01:00
2010-12-17 12:27:22 -08:00
2011-01-12 19:00:40 -08:00
2010-12-08 10:07:24 -08:00
2011-01-13 10:05:56 -08:00
2011-01-14 13:25:30 -08:00
2010-12-26 22:37:05 -08:00
2011-01-05 12:47:25 +01:00
2010-12-08 13:47:38 -08:00
2010-11-22 08:16:14 -08:00
2010-12-08 10:07:24 -08:00
2011-02-09 16:09:48 -05:00
2011-01-13 17:03:39 +01:00
2010-12-19 21:59:35 -08:00
2011-01-09 16:25:03 -08:00
2010-12-16 14:43:14 -08:00
2011-01-10 13:33:17 -08:00
2010-11-22 08:16:15 -08:00
2010-11-15 13:24:06 -05:00
2011-01-14 09:25:11 -08:00
2011-01-14 13:25:30 -08:00
2010-12-17 12:27:22 -08:00
2011-01-14 13:17:26 -08:00
2011-01-01 14:56:18 -08:00
2011-01-05 15:38:53 -08:00
2010-11-22 08:16:16 -08:00
2011-02-03 16:44:42 -05:00
2010-12-08 13:47:38 -08:00
2011-01-11 14:03:09 -08:00
2011-01-13 10:05:56 -08:00
2010-12-16 13:44:24 -08:00
2011-01-12 20:03:43 -05:00
43629f8f5e