| commit | 6d94074f0804143eac6bce72dc04447c0040e7d8 | [log] [tgz] |
|---|---|---|
| author | Davi Arnaut <davi.arnaut@gmail.com> | Fri Feb 03 03:04:46 2006 -0800 |
| committer | Linus Torvalds <torvalds@g5.osdl.org> | Fri Feb 03 08:32:10 2006 -0800 |
| tree | 2833a03682e12d81d4bd849435cd9f95e64e9350 | |
| parent | 353368dffb56b066cbe00264581a56caf0241b29 [diff] |
[PATCH] Fix keyctl usage of strnlen_user() In the small window between strnlen_user() and copy_from_user() userspace could alter the terminating `\0' character. Signed-off-by: Davi Arnaut <davi.arnaut@gmail.com> Cc: David Howells <dhowells@redhat.com> Cc: <stable@kernel.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>