Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 103655 Details for
Bug 157186
Kernel: remote memory corruptor in ibmtr.c (CVE-2006-6333)
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
OK... this is really annoying.
ibmtr.patch (text/plain), 1.04 KB, created by
Harlan Lieberman-Berg (RETIRED)
on 2006-12-08 19:43:07 UTC
(
hide
)
Description:
OK... this is really annoying.
Filename:
MIME Type:
Creator:
Harlan Lieberman-Berg (RETIRED)
Created:
2006-12-08 19:43:07 UTC
Size:
1.04 KB
patch
obsolete
>From: Al Viro <viro@hera.kernel.org> >Date: Mon, 4 Dec 2006 22:05:09 +0000 (+0000) >Subject: [PATCH] remote memory corruptor in ibmtr.c >X-Git-Url: http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=ee28b0da1069ced1688aa9d0b7b378353b988321 > >[PATCH] remote memory corruptor in ibmtr.c > >ip_summed changes last summer had missed that one. As the result, >we have ip_summed interpreted as CHECKSUM_PARTIAL now. IOW, >->csum is interpreted as offset of checksum in the packet. net/core/* >will both read and modify the value as that offset, with obvious >reasons. At the very least it's a remote memory corruptor. > >Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> >Signed-off-by: Linus Torvalds <torvalds@osdl.org> >--- > >--- a/drivers/net/tokenring/ibmtr.c >+++ b/drivers/net/tokenring/ibmtr.c >@@ -1826,7 +1826,7 @@ static void tr_rx(struct net_device *dev > skb->protocol = tr_type_trans(skb, dev); > if (IPv4_p) { > skb->csum = chksum; >- skb->ip_summed = 1; >+ skb->ip_summed = CHECKSUM_COMPLETE; > } > netif_rx(skb); > dev->last_rx = jiffies;
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 157186
:
103651
|
103653
| 103655