Files
twx-linux/drivers/char
Matt Mackall 0496a0322a [PATCH] random: fix bound check ordering (CVE-2007-3105)
If root raised the default wakeup threshold over the size of the
output pool, the pool transfer function could overflow the stack with
RNG bytes, causing a DoS or potential privilege escalation.

(Bug reported by the PaX Team <pageexec@freemail.hu>)

Cc: Theodore Tso <tytso@mit.edu>
Cc: Willy Tarreau <w@1wt.eu>
Signed-off-by: Matt Mackall <mpm@selenic.com>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: Willy Tarreau <w@1wt.eu>
2007-08-25 17:24:18 +02:00
..
2007-01-05 23:55:23 -08:00
2006-12-08 08:28:57 -08:00
2006-12-07 08:39:41 -08:00
2006-12-08 08:28:57 -08:00
2006-10-04 07:55:13 -07:00
2006-12-08 08:28:57 -08:00
2006-11-22 14:57:56 +00:00
2006-12-04 02:00:36 -05:00
2006-12-08 08:28:57 -08:00
2006-12-08 08:28:57 -08:00
2007-05-01 17:06:00 -07:00
2006-12-08 08:28:57 -08:00
2006-11-13 07:40:42 -08:00
2006-12-08 08:28:57 -08:00
2006-12-08 08:28:57 -08:00
2006-12-08 08:28:57 -08:00
2006-12-22 08:55:47 -08:00
2006-12-08 08:28:57 -08:00
2006-12-08 08:28:57 -08:00
2007-03-09 10:50:30 -08:00
2006-12-08 08:28:59 -08:00
2006-12-08 08:28:57 -08:00
2007-01-23 07:52:06 -08:00
2006-12-20 16:37:48 +11:00
2006-12-20 16:37:47 +11:00
2006-12-08 08:28:57 -08:00