Nicolas de Pesloüan 79236680bd bonding: fix a buffer overflow in bonding_show_queue_id. ... The test for buffer overflow ensures we have room for 6 more bytes. sprintf, called with %s:%d, slave->dev->name, slave->queue_id may yield far more than 6 bytes. The correct test is res > (PAGE_SIZE - IFNAMSIZ - 6) . Signed-off-by: Nicolas de Pesloüan <nicolas.2p.debian@free.fr> Signed-off-by: David S. Miller <davem@davemloft.net>		2010-07-14 18:24:54 -07:00
..
bond_3ad.c	bond_3ad.c avoid possible null deref	2009-12-26 20:24:46 -08:00
bond_3ad.h	Remove duplicate slow protocol define in bond_3ad.h	2009-05-09 13:15:49 -07:00
bond_alb.c	Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6	2010-07-07 15:59:38 -07:00
bond_alb.h	Convert bonding timers to workqueues	2007-10-23 20:32:00 -04:00
bond_ipv6.c	ipv6: convert idev_list to list macros	2010-03-20 15:45:09 -07:00
bond_main.c	Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6	2010-07-07 15:59:38 -07:00
bond_sysfs.c	bonding: fix a buffer overflow in bonding_show_queue_id.	2010-07-14 18:24:54 -07:00
bonding.h	bonding: allow user-controlled output slave selection	2010-06-05 02:23:17 -07:00
Makefile	bonding: send IPv6 neighbor advertisement on failover	2008-11-06 00:49:37 -05:00