bugThe GNU Hurd - Bugs: bug #15300, not paranoid enough about device...

 
 

bug #15300: not paranoid enough about device name

Submitted by:  Samuel Thibault <sthibaul>
Submitted on:  Mon 26 Dec 2005 10:48:32 PM UTC  
 
Category: GNU MachSeverity: 3 - Normal
Priority: 5 - NormalItem Group: None
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: 
Open/Closed: OpenReproducibility: None
Size (loc): NonePlanned Release: None
Effort: 0.00
Wiki-like text discussion box: 

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 26 Dec 2005 10:48:32 PM UTC, original submission:

From http://bugs.debian.org/113732

From: Marcus Brinkmann <Marcus.Brinkmann@ruhr-uni-bochum.de>
To: -unavailable-
Subject: not paranoid enough about device name
Date: Fri, 28 Sep 2001 02:09:08 +0200

Package: gnumach

gnumach device_open is not paranoid enough about the device name. I haven't
tried it, but I think that having 128 non-digits with no trailing zero will
make gnumach run past the buffer in dev_name_lookup.

Maybe not worth fixing for gnumach (esp as opening a device requires the
device master port anyway). But it reminds me of the broader issue of the
necessity to audit the code, esp at the borders caused by user supplied
data.

Thanks,
Marcus

Samuel Thibault <sthibaul>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one

Digest:
   task dependencies.

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

No Changes Have Been Made to This Item

Back to the top


Powered by Savane 3.1-cleanup