Linux 2.1.115 devpts bug improved fix

• Previous message: Doug Hughes: "Re: APC UPS PowerChute PLUS exploit..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

After reading more source code here is a better fix to the
linux 2.1.115 devpts bounds checking bug. This version bears
the precious previous by adding a -ve entry in the cache for
next time.


--- linux/fs/devpts/root.c.dist Thu Aug 13 17:54:17 1998
+++ linux/fs/devpts/root.c      Thu Aug 13 20:33:50 1998
@@ -159,10 +159,12 @@
                        entry += (*p++ - '0');
                }
        }
-
-       dentry->d_inode = sbi->inodes[entry];
-       if ( dentry->d_inode )
-               dentry->d_inode->i_count++;
+       if (entry<sbi->max_ptys) /* Check range of number */
+       {
+               dentry->d_inode = sbi->inodes[entry];
+               if ( dentry->d_inode )
+                       dentry->d_inode->i_count++;
+       }

        d_add(dentry, dentry->d_inode);

• Next message: JDC: "Re: ps(1) for freebsd."
• Previous message: Doug Hughes: "Re: APC UPS PowerChute PLUS exploit..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:12:37 PDT