• Marc-Christian Petersen's avatar
    [PATCH] USB: fix CAN-2004-0075 · e19cd00e
    Marc-Christian Petersen authored
    Okay, now while we are at fixing security holes, is there any chance we
    can _finally_ get the attached patch in?
    
    The Vicam USB driver in all Linux Kernels 2.6 mainline does not use the
    copy_from_user function when copying data from userspace to kernel space,
    which crosses security boundaries and allows local users to cause a denial
    of service.
    
    Already ACKed by Greg. Only complaint was inproper coding style which is done
    with attached patch ;)
    
    ciao, Marc
    e19cd00e
vicam.c 37.5 KB