| commit | e6169b53986005dff5307cc8ac1f555334073d09 | |
| author | Adrian Bunk <bunk@stusta.de> | |
| Fri, 17 Nov 2006 16:42:43 +0000 (17 17:42 +0100) | ||
| committer | Adrian Bunk <bunk@stusta.de> | |
| Fri, 17 Nov 2006 16:42:43 +0000 (17 17:42 +0100) | ||
| tree | aed0a633a1ce4f94e38192cfd20610eb940ff3df | treesnapshot (tar.gz zip) |
| parent | 6e16bd44c369e8fd336ef4c11116adaef6d6f3a2 | commitdiff |
security/seclvl.c: fix time wrap (CVE-2005-4352)
initlvl=2 in seclvl gives the guarantee
"Cannot decrement the system time".
But it was possible to set the time to the maximum unixtime value
(19 Jan 2038) resulting in a wrap to the minimum value.
This patch fixes this by disallowing setting the time to any date
after 2030 with initlvl=2.
Signed-off-by: Adrian Bunk <bunk@stusta.de>
initlvl=2 in seclvl gives the guarantee
"Cannot decrement the system time".
But it was possible to set the time to the maximum unixtime value
(19 Jan 2038) resulting in a wrap to the minimum value.
This patch fixes this by disallowing setting the time to any date
after 2030 with initlvl=2.
Signed-off-by: Adrian Bunk <bunk@stusta.de>
| security/seclvl.c | diffblobblamehistory |