bugThe GNU Hurd - Bugs: bug #15300, not paranoid enough about device...

 
 

bug #15300: not paranoid enough about device name

Submitter:  Samuel Thibault <sthibaul>
Submitted:  Mon 26 Dec 2005 10:48:32 PM UTC
   
 
Category:  GNU Mach Severity:  3 - Normal
Priority:  5 - Normal Item Group:  None
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Reproducibility:  None
Size (loc):  None Planned Release:  None
Effort:  0.00
Wiki-like text discussion box: 


* Mandatory Fields

Post a Comment

Add a New Comment Rich Markup
   

Discussion

Mon 26 Dec 2005 10:48:32 PM UTC, original submission:  

From http://bugs.d ... an.org/113732

From: Marcus Brinkmann <Marcus.Brinkmann@ruhr-uni-bochum.de>
To: -email is unavailable-
Subject: not paranoid enough about device name
Date: Fri, 28 Sep 2001 02:09:08 +0200

Package: gnumach

gnumach device_open is not paranoid enough about the device name.  I haven't
tried it, but I think that having 128 non-digits with no trailing zero will
make gnumach run past the buffer in dev_name_lookup.

Maybe not worth fixing for gnumach (esp as opening a device requires the
device master port anyway).  But it reminds me of the broader issue of the
necessity to audit the code, esp at the borders caused by user supplied
data.

Thanks,
Marcus

Samuel Thibault <sthibaul>
Group administrator

 

Attached Files

This item currently has no attached files.

(Note: upload size limit is set to 4.0MiB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

 

Dependencies

This item does not depend on any other items.

Items that depend on this one

Digest:
   task dependencies.

 

Mail Notification Carbon-Copy List

 

Votes

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

History

Follows 1 latest change.

Date Changed by Updated Field Previous Value => Replaced by
2006-11-16 tschwinge Dependencies- task #6111 is dependent

Back to the top

Powered by Savane 3.16-1e6f.
Corresponding source code