DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=date:from:to:cc:subject:message-id:mail-followup-to:references
         :mime-version:content-type:content-disposition:in-reply-to
         :user-agent;
        b=d888MX+fl+luzxT+tsB77cWAUei5U4bC65H44KcxL5tlSBz0kDNHanVDh1291X7inp
         y/phqj22xmruGI5LYDkIpTY8iiet+OrWccbu+wI6yUJR/ekwmHYAyNfKOQpipLlZdqTu
         N6XJDlLGiDoq3IkEPWb9UaniuBviV0mnyw2ik=
Date: Sun, 1 May 2011 09:21:30 +0800
From: Harry Wei <jiaweiwei.xiyou@gmail.com>
To: Jiri Kosina <jkosina@suse.cz>
Cc: linux-kernel@vger.kernel.org, akpm@linux-foundation.org, greg@kroah.com,
        randy.dunlap@oracle.com, joe@perches.com
Subject: Re: [Oops 1/2]Something wrong with copy_from_user() function
Message-ID: <20110501012127.GA2378@gmail.com>
Mail-Followup-To: Jiri Kosina <jkosina@suse.cz>,
	linux-kernel@vger.kernel.org, akpm@linux-foundation.org,
	greg@kroah.com, randy.dunlap@oracle.com, joe@perches.com
References: <20110430061336.GA4274@gmail.com>
 <alpine.LNX.2.00.1104302311530.12035@pobox.suse.cz>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <alpine.LNX.2.00.1104302311530.12035@pobox.suse.cz>
User-Agent: Mutt/1.5.20 (2009-06-14)
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 554
Lines: 17

On Sat, Apr 30, 2011 at 11:13:10PM +0200, Jiri Kosina wrote:
> On Sat, 30 Apr 2011, Harry Wei wrote:
> 
> 
> wpa_set_keys() function (from staging drivers) in your kernel uses 
> copy_from_user() without proper bounds checking, and thus can overflow and 
> corrupt memory.
Hmmm, i see.

Thanks.
Harry Wei.
> 
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/