diff options
author | Ilya Matveychikov <matvejchikov@gmail.com> | 2017-06-24 01:08:49 +0300 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-06-29 10:12:23 +0300 |
commit | 4d6142de06dc677b9315ec24da5135929ac7ae31 (patch) | |
tree | ddbae8cf743c3a6a2d2e32134f7d3653d5adc2eb /fs/exec.c | |
parent | 75735be71f994da3d90657f06ce72a814bb7fc86 (diff) | |
download | linux-4d6142de06dc677b9315ec24da5135929ac7ae31.tar.xz |
lib/cmdline.c: fix get_options() overflow while parsing ranges
commit a91e0f680bcd9e10c253ae8b62462a38bd48f09f upstream.
When using get_options() it's possible to specify a range of numbers,
like 1-100500. The problem is that it doesn't track array size while
calling internally to get_range() which iterates over the range and
fills the memory with numbers.
Link: http://lkml.kernel.org/r/2613C75C-B04D-4BFF-82A6-12F97BA0F620@gmail.com
Signed-off-by: Ilya V. Matveychikov <matvejchikov@gmail.com>
Cc: Jonathan Corbet <corbet@lwn.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs/exec.c')
0 files changed, 0 insertions, 0 deletions