Big problem on linux 2.0

From: visi0n (visi0n@AUX-TECH.ORG)
Date: Sat Dec 11 1999 - 13:11:02 PST

  • Next message: UNYUN: "VDO Live Player 3.02 Buffer Overflow" 

    	I did a little patch for kernel 2.0.38:

+++ socket.c    Thu Dec  9 21:06:51 1999
@@ -1039,7 +1039,7 @@
        register struct msghdr msg;
        register struct iovec iov;

-       if (len < 0)
+       if (len < 0 || len >= 65468)
                return -EINVAL;

        err = verify_area(VERIFY_READ, buff, len);

===============================================================================
visi0n
AUX Technologies
[www.aux-tech.org]

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:20:31 PDT