You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Dan Carpenter b7a314054e isdn: icn: buffer overflow in icn_command() ... This buffer over was detected using static analysis: drivers/isdn/icn/icn.c:1325 icn_command() error: format string overflow. buf_size: 60 length: 98 The calculation for the length of the string is off because it assumes that the dial[] buffer holds a 50 character string, but actually it is at most 31 characters and NUL. I have removed the dial[] buffer because it isn't needed. The maximum length of the string is actually 79 characters and a NUL. I have made the cbuf[] array large enough to hold it and changed the sprintf() to an snprintf() as a further safety enhancement. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		11 years ago
..
act2000	isdn: replace del_timer by del_timer_sync	11 years ago
capi	isdn/capi: Make Middleware depend on CAPI2.0	11 years ago
divert	isdn: divert, hysdn: fix interruptible_sleep_on race	11 years ago
gigaset	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	12 years ago
hardware	isdn: remove deprecated IRQF_DISABLED	11 years ago
hisax	isdn: hisax/elsa: fix sleep_on race in elsa FSM	11 years ago
hysdn	isdn: divert, hysdn: fix interruptible_sleep_on race	11 years ago
i4l	net: isdn: use sk_unattached_filter api	11 years ago
icn	isdn: icn: buffer overflow in icn_command()	11 years ago
isdnloop	isdnloop: several buffer overflows	11 years ago
mISDN	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	11 years ago
pcbit	isdn: pcbit: fix interruptible_sleep_on race	11 years ago
sc	isdn: replace del_timer by del_timer_sync	11 years ago
Kconfig	tty: Added a CONFIG_TTY option to allow removal of TTY	12 years ago
Makefile	…