[Hardy] SRU reguest LP#231746
Tim Gardner
tim.gardner at canonical.com
Thu Sep 11 01:09:27 UTC 2008
Stefan Bader wrote:
> https://bugs.launchpad.net/ubuntu/hardy/+source/linux/+bug/231746
>
> SRU justification:
>
> Impact: iov_iter_advance() skips over zero-length iovecs, however it does not
> properly terminate at the end of the iovec array. This leads to kernel crashed
> under this circumstances.
>
> Fix: Check i->count before skipping zero length iov. And also include a fixup
> to check whther already iteraded over the whole array. One fix comes from the
> 2.6.24.y stable tree, the other from the 2.6.26.y stable tree.
>
> Testcase: see bug report.
>
ACK
--
Tim Gardner tim.gardner at canonical.com
More information about the kernel-team
mailing list