Linux-kernel mailing list archive 1999-51,: Re: Linux Kernel 2.2.13 shooting Solaris ADSM server

# Re: Linux Kernel 2.2.13 shooting Solaris ADSM server

Arjan van de Ven (adve@oce.nl)
Wed, 22 Dec 1999 11:08:06 +0100 (CET)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Sergey Kubushin: "Re: 2.3.34 confirmation of bugfix (panic if no disk in ZIP drive)"
- Previous message: prakash@rnd.cts-corp.com: "Re: Networking kernel: HTTP payload"
- Next in thread: Alan Cox: "Re: Linux Kernel 2.2.13 shooting Solaris ADSM server"
- Reply: Alan Cox: "Re: Linux Kernel 2.2.13 shooting Solaris ADSM server"
- Reply: Matthias Andree: "Re: Linux Kernel 2.2.13 shooting Solaris ADSM server"

In article <19991222094710.B809EB786C@dungeon.inka.de> you wrote:
> adsm has a buffer overflow:
> "2.1.131" or "2.2.13" or any <= 7 char string as version number is ok.
> "2.1.131a" or "2.1.131aa" or "2.1.131-preX" or whatever kernel with
> 8 or more chars will crash the server.

> so, if you used some -pre kernel version, this should be it.
> edit Makefile and remove the extraversion.

Hmm. I think it might be a good idea to provide snprintf next to sprintf...
(Or even remove sprintf to make sure everyone uses the safe version)

If any of the kernel-gods wnat this, I'll make a patch for it in the comming
week.

Greetings,
Arjan van de Ven

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

- Next message: Sergey Kubushin: "Re: 2.3.34 confirmation of bugfix (panic if no disk in ZIP drive)"
- Previous message: prakash@rnd.cts-corp.com: "Re: Networking kernel: HTTP payload"
- Next in thread: Alan Cox: "Re: Linux Kernel 2.2.13 shooting Solaris ADSM server"
- Reply: Alan Cox: "Re: Linux Kernel 2.2.13 shooting Solaris ADSM server"
- Reply: Matthias Andree: "Re: Linux Kernel 2.2.13 shooting Solaris ADSM server"