Message-Id: <200306071112.h57BCmsG006701@ginger.cmf.nrl.navy.mil>
To: Werner Almesberger <wa@almesberger.net>
cc: Mitchell Blank Jr <mitch@sfgoth.com>, "David S. Miller" <davem@redhat.com>,
       linux-kernel@vger.kernel.org
Subject: Re: [PATCH][ATM] use rtnl_{lock,unlock} during device operations (take 2) 
In-reply-to: Your message of "Fri, 06 Jun 2003 20:19:06 -0300."
             <20030606201906.F3232@almesberger.net> 
Date: Sat, 07 Jun 2003 07:10:58 -0400
From: chas williams <chas@cmf.nrl.navy.mil>
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 723
Lines: 14

In message <20030606201906.F3232@almesberger.net>,Werner Almesberger writes:
>It could probably be used to leverage other security holes in
>atmsigd. (Not that I'm aware of any, but I'd be surprised if
>there were none.)

well various bits of the atm library used to use vsprintf.  we changed
this to vsnprintf just to avoid trouble.  i couldnt see how it might be
possible for someone to send a call setup that would overflow the debug
format buffer but better safe than sorry.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/