
I discovered there's a potential buffer overflow in my hwsetup dynblacklist patch because the blacklist file can have more that 200 module names.
Here's a mini patch to add some primitive bounds checking to fix it. I also decreased the module name size from 1024 chars to 200 which is more than enough, to save memory.
The patch is still pending the maintainer's response.
http://bugs.gentoo.org/show_bug.cgi?id=115669
| Attachment | Size |
|---|---|
| hwsetup-1.1-dyn_blacklist_bounds_check.patch.txt | 742 bytes |
Comments
Post new comment