Qualys Security Advisory
3ccc6ed262
proc/slab.h: Fix off-by-one overflow in sscanf().
...
In proc/slab.c, functions parse_slabinfo20() and parse_slabinfo11(),
sscanf() might overflow curr->name, because "String input conversions
store a terminating null byte ('\0') to mark the end of the input; the
maximum field width does not include this terminator."
Add one byte to name[] for this terminator.
2018-05-19 07:32:21 +10:00
..
2018-05-19 07:32:21 +10:00
2018-05-19 07:32:21 +10:00
2013-04-07 18:05:01 +10:00
2018-05-19 07:32:21 +10:00
2012-01-09 21:44:51 +11:00
2016-08-23 21:12:32 +10:00
2012-01-09 21:44:51 +11:00
2018-02-28 21:24:03 +11:00
2011-12-23 09:18:43 +11:00
2018-03-01 21:25:04 +11:00
2017-05-22 21:34:32 +10:00
2018-04-10 21:28:11 +10:00
2015-06-19 19:09:21 +10:00
2015-06-19 21:00:46 +10:00
2017-12-23 17:41:37 +11:00
2016-07-06 22:26:02 +10:00
2016-07-06 22:26:02 +10:00
2014-08-08 22:14:21 +02:00
2018-05-19 07:32:21 +10:00
2016-07-09 13:23:27 +10:00
2014-08-08 22:14:21 +02:00
2018-05-19 07:32:21 +10:00
2012-01-09 21:44:51 +11:00
2016-10-12 16:59:01 +09:00
2018-05-19 07:32:21 +10:00
2017-09-03 20:59:23 +10:00
2016-06-30 18:29:50 +02:00
2015-06-20 07:46:23 +10:00
2018-05-19 07:32:21 +10:00
2016-12-07 21:50:59 +11:00
2015-06-19 19:09:20 +10:00
2017-09-23 17:32:29 +10:00
2012-02-22 10:35:12 -05:00