Bug in rsbac_auth_get_caplist


From: Amon Ott <ao@rsbac.org>
Subject: Bug in rsbac_auth_get_caplist
Date: Fri, 28 Dec 2001 11:26:28 +0100

Next Article (by Subject): BUG! sys_rename() Stanislav Ievlev
Previous Article (by Subject): Re: bug in patch-2.4.3-v1.1.1.gz SZALAY Attila
Articles sorted by: [Date] [Author] [Subject]


Due to a memory allocation bug, you get a kernel oops when requesting an AUTH 
cap list with more than 10 members, e.g. through
auth_set_cap FILE get <filename>.

The following patch to rsbac/help/syscalls.c temporarily fixes the problem 
(unless you use very large maxnum values for the syscall):
 
--- syscalls.c~	Tue Jul 24 18:23:17 2001
+++ syscalls.c	Fri Dec 28 11:09:36 2001
@@ -2432,7 +2432,7 @@
     struct dentry * t_dentry;
     int     err = 0, tmperr = 0;
     union rsbac_target_id_t  tid;
-    rsbac_uid_t k_caplist[maxnum];
+    rsbac_uid_t k_caplist[2*maxnum];
 
     /* for adf_request */
 #if defined(CONFIG_RSBAC_AUTH)


Amon.
--
http://www.rsbac.org
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Subject): BUG! sys_rename() Stanislav Ievlev
Previous Article (by Subject): Re: bug in patch-2.4.3-v1.1.1.gz SZALAY Attila
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.