Re: [Xenomai-core] [PATCH] Buffer over flow in /proc/xenomai/stat

2008-08-13 Thread Philippe Gerum
Jan Kiszka wrote: Philippe Gerum wrote: Philippe Gerum wrote: Atsushi-san, Atsushi Katagiri wrote: Yes, I actually encountered this bug and my Linux was crashed by NULL pointer dereference. I think this is a very simple bug. It happens everytime we open /proc/xenomai/stat, because the

Re: [Xenomai-core] [PATCH] Buffer over flow in /proc/xenomai/stat

2008-08-04 Thread Philippe Gerum
Atsushi Katagiri wrote: Hello all. This is a small patch that fixes a serious bug. When we open /proc/xenomai/stat, function stat_seq_open kmalloc the area, write the data and increment iter-nentries. The last increment of this value reaches count, and at the next iteration

Re: [Xenomai-core] [PATCH] Buffer over flow in /proc/xenomai/stat

2008-08-04 Thread Atsushi Katagiri
- From: Philippe Gerum [EMAIL PROTECTED] To: Atsushi Katagiri [EMAIL PROTECTED] Cc: xenomai-core@gna.org Sent: Monday, August 04, 2008 4:49 PM Subject: Re: [Xenomai-core] [PATCH] Buffer over flow in /proc/xenomai/stat Atsushi Katagiri wrote: Hello all. This is a small patch that fixes a serious

Re: [Xenomai-core] [PATCH] Buffer over flow in /proc/xenomai/stat

2008-08-04 Thread Philippe Gerum
Philippe Gerum wrote: Atsushi-san, Atsushi Katagiri wrote: Yes, I actually encountered this bug and my Linux was crashed by NULL pointer dereference. I think this is a very simple bug. It happens everytime we open /proc/xenomai/stat, because the last iter-nentries++; (line 466) surely