Dan Carpenter facb4edc1e phonet: some signedness bugs
Dan Rosenberg pointed out that there were some signed comparison bugs
in the phonet protocol.

http://marc.info/?l=full-disclosure&m=129424528425330&w=2

The problem is that we check for array overflows but "protocol" is
signed and we don't check for array underflows.  If you have already
have CAP_SYS_ADMIN then you could use the bugs to get root, or someone
could cause an oops by mistake.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Acked-by: Rémi Denis-Courmont <remi.denis-courmont@nokia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2011-01-10 13:33:17 -08:00
..
2010-09-23 14:33:39 -07:00
2011-01-10 13:33:17 -08:00
2010-11-29 09:45:15 -08:00
2009-11-04 05:06:25 -08:00
2010-12-31 10:47:46 -08:00
2010-06-03 03:21:52 -07:00
2010-11-10 12:12:00 -08:00
2010-10-27 11:37:32 -07:00
2010-10-25 13:09:44 -07:00
2009-11-04 05:06:25 -08:00
2010-11-24 11:16:42 -08:00
2010-12-19 21:59:35 -08:00
2010-09-23 14:33:39 -07:00
2010-10-25 13:09:45 -07:00
2010-12-12 22:08:17 -08:00
2010-10-27 11:37:32 -07:00
2010-09-23 14:33:39 -07:00
2010-06-03 03:21:52 -07:00
2009-12-26 20:46:28 -08:00
2010-06-03 03:21:52 -07:00
2010-12-02 13:27:33 -08:00
2010-10-25 14:18:27 -07:00
2009-11-04 05:06:25 -08:00
2010-11-24 11:16:43 -08:00
2010-12-02 13:27:33 -08:00
2010-11-10 12:12:00 -08:00
2009-10-07 16:39:43 -04:00
2010-11-28 11:12:20 -08:00