diff options
| author |   Al Viro <viro@zeniv.linux.org.uk> | 2017-03-25 00:43:43 -0400 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2017-04-06 02:10:31 -0400 |
| commit | 1c87ea4566612ef37e31f6389cbb232bd49cdd45 (patch) | |
| tree | 2332c1659bde70ba5a8f64a88d97c8d0e3474c6f /arch/alpha | |
| parent | don't open-code kernel_setsockopt() (diff) | |
| download | linux-dev-1c87ea4566612ef37e31f6389cbb232bd49cdd45.tar.xz linux-dev-1c87ea4566612ef37e31f6389cbb232bd49cdd45.zip | |
alpha: fix stack smashing in old_adjtimex(2)
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'arch/alpha')
| -rw-r--r-- | arch/alpha/kernel/osf_sys.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/alpha/kernel/osf_sys.c b/arch/alpha/kernel/osf_sys.c index 0b961093ca5c..6d76e528ab8f 100644 --- a/arch/alpha/kernel/osf_sys.c +++ b/arch/alpha/kernel/osf_sys.c @@ -1290,7 +1290,7 @@ SYSCALL_DEFINE1(old_adjtimex, struct timex32 __user *, txc_p) /* copy relevant bits of struct timex. */ if (copy_from_user(&txc, txc_p, offsetof(struct timex32, time)) || copy_from_user(&txc.tick, &txc_p->tick, sizeof(struct timex32) - - offsetof(struct timex32, time))) + offsetof(struct timex32, tick))) return -EFAULT; ret = do_adjtimex(&txc); |