OSDN Git Service
(root)
/
uclinux-h8
/
linux.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
fa0e846
)
econet: fix CVE-2010-3850
author
Phil Blundell
<philb@gnu.org>
Wed, 24 Nov 2010 19:49:53 +0000
(11:49 -0800)
committer
David S. Miller
<davem@davemloft.net>
Wed, 24 Nov 2010 19:49:53 +0000
(11:49 -0800)
Add missing check for capable(CAP_NET_ADMIN) in SIOCSIFADDR operation.
Signed-off-by: Phil Blundell <philb@gnu.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/econet/af_econet.c
patch
|
blob
|
history
diff --git
a/net/econet/af_econet.c
b/net/econet/af_econet.c
index
e366f1b
..
d41ba8e
100644
(file)
--- a/
net/econet/af_econet.c
+++ b/
net/econet/af_econet.c
@@
-661,6
+661,9
@@
static int ec_dev_ioctl(struct socket *sock, unsigned int cmd, void __user *arg)
err = 0;
switch (cmd) {
case SIOCSIFADDR:
+ if (!capable(CAP_NET_ADMIN))
+ return -EPERM;
+
edev = dev->ec_ptr;
if (edev == NULL) {
/* Magic up a new one. */