Re: [PATCH] 6pack: fix buffer length mishandling

2016-09-20 Thread David Miller
From: Alan Date: Mon, 19 Sep 2016 20:15:24 +0100 > Dmitry Vyukov wrote: >> different runs). Looking at code, the following looks suspicious -- we >> limit copy by 512 bytes, but use the original count which can be >> larger than 512: >> >> static void sixpack_receive_buf(struct tty_struct *tty, >

[PATCH] 6pack: fix buffer length mishandling

2016-09-19 Thread Alan
Dmitry Vyukov wrote: > different runs). Looking at code, the following looks suspicious -- we > limit copy by 512 bytes, but use the original count which can be > larger than 512: > > static void sixpack_receive_buf(struct tty_struct *tty, > const unsigned char *cp, char *fp, int count) > { >