Re: [B.A.T.M.A.N.] [PATCH] batman-adv: Fix invalid read while copying bat_iv.bcast_own

[Marek Lindner <mareklindner@neomailbox.ch>]

[-- Attachment #1: Type: text/plain, Size: 821 bytes --]

On Sunday, November 29, 2015 01:48:57 Sven Eckelmann wrote:
> batadv_iv_ogm_orig_del_if removes a part of the bcast_own which previously
> belonged to the now removed interface. This is done by copying all data
> which comes before the removed interface and then appending all the data
> which comes after the removed interface.
> 
> The address calculation for the position of the data which comes after the
> removed interface assumed that the bat_iv.bcast_own is a pointer to a
> single byte datatype. But it is a pointer to unsigned long and thus the
> calculated position was wrong off factor sizeof(unsigned long).
> 
> Signed-off-by: Sven Eckelmann <sven@narfation.org>
> ---
>  net/batman-adv/bat_iv_ogm.c | 6 ++++--
>  1 file changed, 4 insertions(+), 2 deletions(-)

Applied in revision 24b1aae.

Thanks,
Marek

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 473 bytes --]