1. 07 1月, 2016 1 次提交
  2. 06 1月, 2016 1 次提交
    • O
      6pack: fix free memory scribbles · 60aa3b08
      One Thousand Gnomes 提交于
      commit acf673a3 fixed a user triggerable free
      memory scribble but in doing so replaced it with a different one that allows
      the user to control the data and scribble even more.
      
      sixpack_close is called by the tty layer in tty context. The tty context is
      protected by sp_get() and sp_put(). However network layer activity via
      sp_xmit() is not protected this way. We must therefore stop the queue
      otherwise the user gets to dump a buffer mostly of their choice into freed
      kernel pages.
      Signed-off-by: NAlan Cox <alan@linux.intel.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      60aa3b08
  3. 05 1月, 2016 5 次提交
  4. 30 12月, 2015 1 次提交
  5. 29 12月, 2015 6 次提交
  6. 25 12月, 2015 3 次提交
  7. 24 12月, 2015 3 次提交
  8. 23 12月, 2015 8 次提交
  9. 22 12月, 2015 12 次提交
新手
引导
客服 返回
顶部