The commit is pushed to "branch-rh7-3.10.0-229.7.2-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-229.7.2.vz7.6.4 ------> commit e2164f15d2f004ce076da3aa925b681bd8cde8d8 Author: Andrey Ryabinin <aryabi...@odin.com> Date: Mon Aug 31 17:15:30 2015 +0400
ve/kmod: fix out-of-bounds access in call_modprobe() Commit 18f83b2460e2 ("ve/kmod: Port autoloading from CT") extended argv array for one more element, however it wasn't extended on allocation site. https://jira.sw.ru/browse/PSBM-38666 Fixes: 18f83b2460e2 ("ve/kmod: Port autoloading from CT") Signed-off-by: Andrey Ryabinin <aryabi...@odin.com> Cc: Konstantin Khorenko <khore...@virtuozzo.com> Signed-off-by: Andrey Ryabinin <aryabi...@odin.com> Acked-by: Kirill Tkhai <ktk...@odin.com> --- kernel/kmod.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kmod.c b/kernel/kmod.c index e0554f8..aa5cb99 100644 --- a/kernel/kmod.c +++ b/kernel/kmod.c @@ -91,7 +91,7 @@ static int call_modprobe(char *module_name, int wait, int blacklist) NULL }; - char **argv = kmalloc(sizeof(char *[5]), GFP_KERNEL); + char **argv = kmalloc(sizeof(char *[6]), GFP_KERNEL); if (!argv) goto out; _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel