From mboxrd@z Thu Jan  1 00:00:00 1970
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Mon, 03 Dec 2012 19:10:47 +0000
Subject: Re: [patch] telephony: ijx: buffer overflow in ixj_write_cid()
Message-Id: <20121203191047.GA13339@kroah.com>
List-Id: <kernel-janitors.vger.kernel.org>
References: <20121203190512.GA9273@elgon.mountain>
In-Reply-To: <20121203190512.GA9273@elgon.mountain>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: kernel-janitors@vger.kernel.org

On Mon, Dec 03, 2012 at 10:05:12PM +0300, Dan Carpenter wrote:
> We get this from user space and nothing has been done to ensure that
> these strings are NUL terminated.
> 
> Cc: stable@vger.kernel.org
> Reported-by: Chen Gang <gang.chen@asianux.com>
> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
> ---
> This driver is going to be removed in the 3.8 kernel but the fix is
> needed for 3.7 and older.

Ok, I'll queue it up for 3.7.1 and older stable kernels at that time, as
it's too late for 3.7-final right now, especially as no one is even
using this code :)

thanks,

greg k-h