Piteball/android_kernel_google_msm
1
0
Fork 0
mirror of https://github.com/followmsi/android_kernel_google_msm.git synced 2024-11-06 23:17:41 +00:00
Code Issues Projects Releases Wiki Activity

net: llc: use correct size for sysctl timeout entries

Browse source 
The timeout entries are sizeof(int) rather than sizeof(long), which
means that when they were getting read we'd also leak kernel memory
to userspace along with the timeout values.

Change-Id: I328d1186720a6f70f555eeeb62c83ee69814868d
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Sasha Levin 2015-01-23 20:47:00 -05:00 committed by Zhao Wei Liew
parent 871eac221e
commit 1fea326d57
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
net/llc/sysctl_net_llc.c
View file

@ -17,28 +17,28 @@ static struct ctl_table llc2_timeout_table[] = {
{ {
.procname = "ack", .procname = "ack",
.data = &sysctl_llc2_ack_timeout, .data = &sysctl_llc2_ack_timeout,
.maxlen = sizeof(long), .maxlen = sizeof(sysctl_llc2_ack_timeout),
.mode = 0644, .mode = 0644,
.proc_handler = proc_dointvec_jiffies, .proc_handler = proc_dointvec_jiffies,
}, },
{ {
.procname = "busy", .procname = "busy",
.data = &sysctl_llc2_busy_timeout, .data = &sysctl_llc2_busy_timeout,
.maxlen = sizeof(long), .maxlen = sizeof(sysctl_llc2_busy_timeout),
.mode = 0644, .mode = 0644,
.proc_handler = proc_dointvec_jiffies, .proc_handler = proc_dointvec_jiffies,
}, },
{ {
.procname = "p", .procname = "p",
.data = &sysctl_llc2_p_timeout, .data = &sysctl_llc2_p_timeout,
.maxlen = sizeof(long), .maxlen = sizeof(sysctl_llc2_p_timeout),
.mode = 0644, .mode = 0644,
.proc_handler = proc_dointvec_jiffies, .proc_handler = proc_dointvec_jiffies,
}, },
{ {
.procname = "rej", .procname = "rej",
.data = &sysctl_llc2_rej_timeout, .data = &sysctl_llc2_rej_timeout,
.maxlen = sizeof(long), .maxlen = sizeof(sysctl_llc2_rej_timeout),
.mode = 0644, .mode = 0644,
.proc_handler = proc_dointvec_jiffies, .proc_handler = proc_dointvec_jiffies,
}, },