oss-security - Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <49238C58.4030604@redhat.com>
Date: Wed, 19 Nov 2008 11:47:36 +0800
From: Eugene Teo <eteo@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: V4L/DVB (9621): Avoid writing
 outside shadow.bytes[] array

Eugene Teo wrote:
> This was fixed in upstream by the maintainer, Mauro Carvalho Chehab.
> 
> "[PATCH] V4L/DVB (9621): Avoid writing outside shadow.bytes[] array
> 
> There were no check about the limits of shadow.bytes array. This offers
> a risk of writing values outside the limits, overriding other data
> areas."
> 
> Upstream commit: 494264379d186bf806613d27aafb7d88d42f4212
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=471835

If the write operation fails, the device won't be able to decode audio
signals properly, so on further analysis, we probably don't need a CVE
name for this. Take note.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.