diff for duplicates of <20101124064649.GQ1522@bicker> diff --git a/a/1.txt b/N1/1.txt index 7483be2..e84ad8b 100644 --- a/a/1.txt +++ b/N1/1.txt @@ -1,8 +1,8 @@ On Wed, Nov 24, 2010 at 03:25:58PM +0900, Paul Mundt wrote: > On Sun, Nov 21, 2010 at 08:40:01PM +0300, Vasiliy Kulikov wrote: > > (count + p) is not checked for integer overflow. If p < fbmemlength -> > and count = (size_t)(1 - p) (very big unsigned integer) then -> > count + p = 1 < fbmemlength and copy_to_user(base_addr+p, buf, count) +> > and count == (size_t)(1 - p) (very big unsigned integer) then +> > count + p == 1 < fbmemlength and copy_to_user(base_addr+p, buf, count) > > overflows base_addr. > > > > Signed-off-by: Vasiliy Kulikov <segoon@openwall.com> diff --git a/a/content_digest b/N1/content_digest index 0ed5c2c..9065eec 100644 --- a/a/content_digest +++ b/N1/content_digest @@ -2,7 +2,7 @@ "ref\020101124062558.GF11705@linux-sh.org\0" "From\0Dan Carpenter <error27@gmail.com>\0" "Subject\0Re: [PATCH] video: arcfb: fix buffer overflow\0" - "Date\0Wed, 24 Nov 2010 06:46:49 +0000\0" + "Date\0Wed, 24 Nov 2010 09:46:49 +0300\0" "To\0Paul Mundt <lethal@linux-sh.org>\0" "Cc\0Vasiliy Kulikov <segoon@openwall.com>" kernel-janitors@vger.kernel.org @@ -14,8 +14,8 @@ "On Wed, Nov 24, 2010 at 03:25:58PM +0900, Paul Mundt wrote:\n" "> On Sun, Nov 21, 2010 at 08:40:01PM +0300, Vasiliy Kulikov wrote:\n" "> > (count + p) is not checked for integer overflow. If p < fbmemlength\n" - "> > and count = (size_t)(1 - p) (very big unsigned integer) then\n" - "> > count + p = 1 < fbmemlength and copy_to_user(base_addr+p, buf, count)\n" + "> > and count == (size_t)(1 - p) (very big unsigned integer) then\n" + "> > count + p == 1 < fbmemlength and copy_to_user(base_addr+p, buf, count)\n" "> > overflows base_addr.\n" "> > \n" "> > Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>\n" @@ -28,4 +28,4 @@ "regards,\n" dan carpenter -9041a3a6e5a3bd5152710afb453e5663cca4342268a501d088aa642ab202137f +e491f4f1e0b5a94719eac8135aa0e483d156b68c1963bcabc74eb44e3a67917d
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.