Date: Wed, 19 Nov 2008 11:47:36 +0800 From: Eugene Teo <eteo@...hat.com> To: oss-security@...ts.openwall.com CC: "Steven M. Christey" <coley@...us.mitre.org> Subject: Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes array Eugene Teo wrote: > This was fixed in upstream by the maintainer, Mauro Carvalho Chehab. > > "[PATCH] V4L/DVB (9621): Avoid writing outside shadow.bytes array > > There were no check about the limits of shadow.bytes array. This offers > a risk of writing values outside the limits, overriding other data > areas." > > Upstream commit: 494264379d186bf806613d27aafb7d88d42f4212 > > https://bugzilla.redhat.com/show_bug.cgi?id=471835 If the write operation fails, the device won't be able to decode audio signals properly, so on further analysis, we probably don't need a CVE name for this. Take note. Thanks, Eugene
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.