Author: pluto                        Date: Wed Mar  9 22:46:20 2005 GMT
Module: SOURCES                       Tag: LINUX_2_6
---- Log message:
- security fix.

---- Files affected:
SOURCES:
   linux-2.6-epoll-overflow.patch (NONE -> 1.1.2.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/linux-2.6-epoll-overflow.patch
diff -u /dev/null SOURCES/linux-2.6-epoll-overflow.patch:1.1.2.1
--- /dev/null   Wed Mar  9 23:46:20 2005
+++ SOURCES/linux-2.6-epoll-overflow.patch      Wed Mar  9 23:46:15 2005
@@ -0,0 +1,34 @@
+diff -Naru a/fs/eventpoll.c b/fs/eventpoll.c
+--- a/fs/eventpoll.c    2005-03-09 14:43:58 -08:00
++++ b/fs/eventpoll.c    2005-03-09 14:43:58 -08:00
+@@ -619,6 +619,7 @@
+    return error;
+ }
+
++#define MAX_EVENTS (INT_MAX / sizeof(struct epoll_event))
+
+ /*
+  * Implement the event wait interface for the eventpoll file. It is the kernel
+@@ -635,7 +636,7 @@
+             current, epfd, events, maxevents, timeout));
+
+    /* The maximum number of event must be greater than zero */
+-   if (maxevents <= 0)
++   if (maxevents <= 0 || maxevents > MAX_EVENTS)
+        return -EINVAL;
+
+    /* Verify that the area passed by the user is writeable */
+# This is a BitKeeper generated diff -Nru style patch.
+#
+# ChangeSet
+#   2005/03/08 08:18:50-08:00 [EMAIL PROTECTED]
+#   epoll: return proper error on overflow condition
+#
+#   Noted by Georgi Guninski.
+#
+# fs/eventpoll.c
+#   2005/03/08 08:18:40-08:00 [EMAIL PROTECTED] +2 -1
+#   epoll: return proper error on overflow condition
+#
+#   Noted by Georgi Guninski.
+#
================================================================

_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit

Reply via email to