Attachment 314438 Details for Bug 458350 – Proposed backported patch

[patch] Proposed backported patch

patch (text/plain), 1.13 KB, created by Eugene Teo (Security Response) on 2008-08-17 03:28:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Eugene Teo (Security Response)

Created: 2008-08-17 03:28:28 UTC

Size: 1.13 KB

patch

obsolete

>diff -uprN linux-2.6.24.7.noarch.default/fs/cifs/asn1.c linux-2.6.24.7.noarch/fs/cifs/asn1.c
>--- linux-2.6.24.7.noarch.default/fs/cifs/asn1.c	2008-08-17 11:05:43.000000000 +0800
>+++ linux-2.6.24.7.noarch/fs/cifs/asn1.c	2008-08-17 11:17:47.000000000 +0800
>@@ -400,7 +400,7 @@ asn1_oid_decode(struct asn1_ctx *ctx,
> 	size = eoc - ctx->pointer + 1;
> 
> 	/* first subid actually encodes first two subids */
>-	if (size < 2 || size > ULONG_MAX/sizeof(unsigned long))
>+	if (size < 2 || size > UINT_MAX/sizeof(unsigned long))
> 		return 0;
> 
> 	*oid = kmalloc(size * sizeof(unsigned long), GFP_ATOMIC);
>diff -uprN linux-2.6.24.7.noarch.default/net/ipv4/netfilter/nf_nat_snmp_basic.c linux-2.6.24.7.noarch/net/ipv4/netfilter/nf_nat_snmp_basic.c
>--- linux-2.6.24.7.noarch.default/net/ipv4/netfilter/nf_nat_snmp_basic.c	2008-08-17 11:05:43.000000000 +0800
>+++ linux-2.6.24.7.noarch/net/ipv4/netfilter/nf_nat_snmp_basic.c	2008-08-17 11:16:56.000000000 +0800
>@@ -438,8 +438,8 @@ static unsigned char asn1_oid_decode(str
> 				     unsigned int *len)
> {
> 	unsigned long subid;
>-	unsigned int  size;
> 	unsigned long *optr;
>+	size_t size;
> 
> 	size = eoc - ctx->pointer + 1;
>

Actions: View | Diff

Attachments on bug 458350: 313781 | 314438