aboutsummaryrefslogtreecommitdiff
path: root/net/lapb
diff options
context:
space:
mode:
authorThomas Jarosch <[email protected]>2011-10-17 16:48:10 +0200
committerPekka Enberg <[email protected]>2011-10-18 19:57:59 +0300
commitfe353178653b15add8626f5474842601be160281 (patch)
tree49c4d36e9f3929df1f561033722cbf72c65fee96 /net/lapb
parentab067e99d22ec78ff646de1283348729d1aa66d4 (diff)
tools, slub: Fix off-by-one buffer corruption after readlink() call
readlink() never zero terminates the provided buffer. Therefore we already do buffer[count] = 0; This leads to an off-by-one buffer corruption as readlink() might return the full size of the buffer. The common technique is to reduce the buffer size by one. Another fix would be to check if (count < 0 || count == sizeof(buffer)) fatal(); Reducing the buffer size by one is easier IMHO. Signed-off-by: Thomas Jarosch <[email protected]> Acked-by: David Rientjes <[email protected]> Acked-by: Christoph Lameter <[email protected]> Signed-off-by: Pekka Enberg <[email protected]>
Diffstat (limited to 'net/lapb')
0 files changed, 0 insertions, 0 deletions