Re: Linux Kernel 2.2.13 shooting Solaris ADSM server

Arjan van de Ven (adve@oce.nl)
Wed, 22 Dec 1999 11:08:06 +0100 (CET)


In article <19991222094710.B809EB786C@dungeon.inka.de> you wrote:
> adsm has a buffer overflow:
> "2.1.131" or "2.2.13" or any <= 7 char string as version number is ok.
> "2.1.131a" or "2.1.131aa" or "2.1.131-preX" or whatever kernel with
> 8 or more chars will crash the server.

> so, if you used some -pre kernel version, this should be it.
> edit Makefile and remove the extraversion.

Hmm. I think it might be a good idea to provide snprintf next to sprintf...
(Or even remove sprintf to make sure everyone uses the safe version)

If any of the kernel-gods wnat this, I'll make a patch for it in the comming
week.

Greetings,
Arjan van de Ven

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/