[Hardy] SRU reguest LP#231746

Tim Gardner tim.gardner at canonical.com
Thu Sep 11 01:09:27 UTC 2008


Stefan Bader wrote:
> https://bugs.launchpad.net/ubuntu/hardy/+source/linux/+bug/231746
> 
> SRU justification:
> 
> Impact: iov_iter_advance() skips over zero-length iovecs, however it does not
> properly terminate at the end of the iovec array. This leads to kernel crashed
> under this circumstances.
> 
> Fix: Check i->count before skipping zero length iov. And also include a fixup
> to check whther already iteraded over the whole array. One fix comes from the
> 2.6.24.y stable tree, the other from the 2.6.26.y stable tree.
> 
> Testcase: see bug report.
> 

ACK
-- 
Tim Gardner tim.gardner at canonical.com




More information about the kernel-team mailing list