diff options
| author | Trishansh Bhardwaj <tbhardwa@codeaurora.org> | 2017-04-18 14:44:43 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-04-25 22:31:58 -0700 |
| commit | fa5ee0d28490aa9a967afae1d48a37afc47834d2 (patch) | |
| tree | 02b122819d67fe2606da14eb1166bdd257e4dfbe /net/unix/af_unix.c | |
| parent | 048c70075fecb8f92d923fc5595efa00f2a00082 (diff) | |
msm: camera: Fix kernel overwrite GET_BUF_BY_IDX ioctl
Assign address of buf_info into ioctl_ptr.
Previously we were copying first 8 bytes of buf_info (content)
into ioctl_ptr. Which is dereferenced and written later causing
kernel overwrite vulnerability.
Change-Id: Ie5deae249da8208523027f8ec5632f960757e9bd
Signed-off-by: Trishansh Bhardwaj <tbhardwa@codeaurora.org>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions