APPLIED[B, C]: [SRU][Bionic][Cosmic][Disco][PATCH 0/1] s390/qeth: fix length check in SNMP processing

[Stefan Bader]

On 20.12.18 08:37, Khaled Elmously wrote:
> On 2018-12-14 11:48:17 , Joseph Salisbury wrote:
>> BugLink: https://bugs.launchpad.net/bugs/1805802

The bug report does not reflect the applied state.

>>
>> == SRU Justification ==
>> The response for a SNMP request can consist of multiple parts,
>>               which the cmd callback stages into a kernel buffer until all
>>               parts have been received. If the callback detects that the
>>               staging buffer provides insufficient space, it bails out with
>>               error.
>>               This processing is buggy for the first part of the response -
>>               while it initially checks for a length of 'data_len', it later
>>               copies an additional amount of
>>               'offsetof(struct qeth_snmp_cmd, data)' bytes.
>>
>>
>> == Fix ==
>> 9a764c1e5968 ("s390/qeth: fix length check in SNMP processing")
>>
>> == Regression Potential ==
>> Low.  Changes limited to s390.
>>
>> == Test Case ==
>> A test kernel was built with this patch and tested by the original bug reporter.
>> The bug reporter states the test kernel resolved the bug.
>>
>> Julian Wiedmann (1):
>>   s390/qeth: fix length check in SNMP processing
>>
>>  drivers/s390/net/qeth_core_main.c | 27 ++++++++++++---------------
>>  1 file changed, 12 insertions(+), 15 deletions(-)
>>
>> -- 
>> 2.7.4
>>
>>
>> -- 
>> kernel-team mailing list
>> kernel-team at lists.ubuntu.com
>> https://lists.ubuntu.com/mailman/listinfo/kernel-team
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20190108/e978821b/attachment.sig>