diff options
| author | Vasiliy Kulikov <segoon@openwall.com> | 2011-02-14 11:54:31 +0100 |
|---|---|---|
| committer | Gustavo F. Padovan <padovan@profusion.mobi> | 2011-02-14 15:51:33 +0100 |
| commit | 43629f8f5ea32a998d06d1bb41eefa0e821ff573 (patch) | |
| tree | 6cc475d80311abf2b06e2b8a2cfd96043192decd /net/bluetooth/Kconfig | |
| parent | Bluetooth: Add firmware support for Atheros 3012 (diff) | |
| download | linux-43629f8f5ea32a998d06d1bb41eefa0e821ff573.tar.xz linux-43629f8f5ea32a998d06d1bb41eefa0e821ff573.zip | |
Bluetooth: bnep: fix buffer overflow
Struct ca is copied from userspace. It is not checked whether the "device"
field is NULL terminated. This potentially leads to BUG() inside of
alloc_netdev_mqs() and/or information leak by creating a device with a name
made of contents of kernel stack.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
Diffstat (limited to 'net/bluetooth/Kconfig')
0 files changed, 0 insertions, 0 deletions