Re: [PATCH] cmdline: fix get_options() overflow while parsing ranges

From: Greg KH
Date: Mon May 22 2017 - 12:03:58 EST


On Mon, May 22, 2017 at 07:53:47PM +0400, Ilya Matveychikov wrote:
> When using get_options() it's possible to specify a range of numbers,
> like 1-100500. The problem is that it doesn't track array size while
> calling internally to get_range() which iterates over the range and
> fills the memory with numbers.
>
> Signed-off-by: Ilya V. Matveychikov <matvejchikov@xxxxxxxxx>
> ---
> lib/cmdline.c | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)

<formletter>

This is not the correct way to submit patches for inclusion in the
stable kernel tree. Please read:
https://www.kernel.org/doc/html/latest/process/stable-kernel-rules.html
for how to do this properly.

</formletter>