oss-security - kernel: ALSA: caiaq - Fix possible string-buffer overflow

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4D5B8E30.6010604@redhat.com>
Date: Wed, 16 Feb 2011 16:43:28 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
Subject: kernel: ALSA: caiaq - Fix possible string-buffer overflow

Reported by rafa@...infosecurity.com, "Use strlcpy() to assure not to 
overflow the string array sizes by too long USB device name string."

http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git;a=commitdiff;h=eaae55dac6b64c0616046436b294e69fc5311581

Just FYI, I'm not requesting a CVE name for this as it only affects 
Native Instruments USB audio devices with very long device name which I 
think is unlikely.

https://bugzilla.redhat.com/show_bug.cgi?id=677881

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.