diff options
| author | Jean Tourrilhes <jt@hpl.hp.com> | 2007-03-23 00:31:16 +0000 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2007-03-27 14:10:26 -0400 |
| commit | c2805fbb8630abb95d94ce7adc3f97976f7e0367 (patch) | |
| tree | ca94be7f103d430d38ef6543db597e90f3a63999 /net/core/rtnetlink.c | |
| parent | ed4bb1063171b2f44a40b0a9c400dedb0590dce6 (diff) | |
| download | talos-op-linux-c2805fbb8630abb95d94ce7adc3f97976f7e0367.tar.gz talos-op-linux-c2805fbb8630abb95d94ce7adc3f97976f7e0367.zip | |
[PATCH] WE-22 : prevent information leak on 64 bit
Johannes Berg discovered that kernel space was leaking to
userspace on 64 bit platform. He made a first patch to fix that. This
is an improved version of his patch.
Signed-off-by: Jean Tourrilhes <jt@hpl.hp.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/core/rtnetlink.c')
| -rw-r--r-- | net/core/rtnetlink.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/net/core/rtnetlink.c b/net/core/rtnetlink.c index 6055074c4b81..33ea8eac7fe0 100644 --- a/net/core/rtnetlink.c +++ b/net/core/rtnetlink.c @@ -621,7 +621,8 @@ static int rtnl_getlink(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg) if (err < 0) goto errout; - iw += IW_EV_POINT_OFF; + /* Payload is at an offset in buffer */ + iw = iw_buf + IW_EV_POINT_OFF; } #endif /* CONFIG_NET_WIRELESS_RTNETLINK */ |
