oss-security - CVE request: kernel: si4713-i2c: avoid potential buffer overflow on si4713

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4E268233.3050909@redhat.com>
Date: Wed, 20 Jul 2011 15:22:27 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: si4713-i2c: avoid potential buffer overflow
 on si4713

"While compiling it with Fedora 15, [Mauro Carvalho Chehab] noticed this
issue:

inlined from ‘si4713_write_econtrol_string’ at
drivers/media/radio/si4713-i2c.c:1065:24:
/home/v4l/work_trees/linus/arch/x86/include/asm/uaccess_32.h:211:26:
error: call to ‘copy_from_user_overflow’ declared with attribute error:
copy_from_user() buffer size is not provably correct"

http://git.kernel.org/?p=linux/kernel/git/longterm/longterm-queue-2.6.33.git;a=blob;f=queue-2.6.33/si4713-i2c-avoid-potential-buffer-overflow-on-si4713.patch;h=d99c471980a074cf4ef55fb4428d5f2fec66bffb;hb=29be9ef5e43df840fb19af1d4b3dfa51b3a956c8

AFAIK, only N900 uses this.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.