| commit | bb3e712f45f05c380ee6efed0afd588ed3ce18fb | |
| author | Marcel Holtmann <marcel@holtmann.org> | |
| Thu, 4 Jan 2007 00:53:41 +0000 (4 01:53 +0100) | ||
| committer | Adrian Bunk <bunk@stusta.de> | |
| Thu, 4 Jan 2007 00:53:41 +0000 (4 01:53 +0100) | ||
| tree | b9b5d52a97bb3df3f0e591a663c022e3fb0520fb | treesnapshot (tar.gz zip) |
| parent | 7c876d457b5c7e949032a4ac7aec64af0136d52a | commitdiff |
Call init_timer() for ISDN PPP CCP reset state timer (CVE-2006-5749)
The function isdn_ppp_ccp_reset_alloc_state() sets ->timer.function
and ->timer.data and later on calls add_timer() with no init_timer()
ever done.
Noted by Al Viro.
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
The function isdn_ppp_ccp_reset_alloc_state() sets ->timer.function
and ->timer.data and later on calls add_timer() with no init_timer()
ever done.
Noted by Al Viro.
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
| drivers/isdn/i4l/isdn_ppp.c | diffblobblamehistory |