diff options
author | Mathias Krause <minipli@googlemail.com> | 2012-08-15 11:31:54 +0000 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-09-14 10:00:51 -0700 |
commit | a629a20ed248b9680cb0b2b05a751452067beeae (patch) | |
tree | e992dc0c557f632fdf8498c2d7fe13c9fb77a964 /drivers/oprofile/oprofile_files.c | |
parent | 2b6007fbac1484f788ffffd545d916c10d1fe2e2 (diff) | |
download | kernel_samsung_smdk4412-a629a20ed248b9680cb0b2b05a751452067beeae.zip kernel_samsung_smdk4412-a629a20ed248b9680cb0b2b05a751452067beeae.tar.gz kernel_samsung_smdk4412-a629a20ed248b9680cb0b2b05a751452067beeae.tar.bz2 |
dccp: check ccid before dereferencing
commit 276bdb82dedb290511467a5a4fdbe9f0b52dce6f upstream.
ccid_hc_rx_getsockopt() and ccid_hc_tx_getsockopt() might be called with
a NULL ccid pointer leading to a NULL pointer dereference. This could
lead to a privilege escalation if the attacker is able to map page 0 and
prepare it with a fake ccid_ops pointer.
Signed-off-by: Mathias Krause <minipli@googlemail.com>
Cc: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/oprofile/oprofile_files.c')
0 files changed, 0 insertions, 0 deletions