diff options
| author | cperciva <cperciva@FreeBSD.org> | 2005-09-19 18:43:11 +0000 |
|---|---|---|
| committer | cperciva <cperciva@FreeBSD.org> | 2005-09-19 18:43:11 +0000 |
| commit | a257862d4b574dd3958622bbe9d606f532b79c6c (patch) | |
| tree | a49151162fd35076951a92a968baf9fffd4dc955 /sys/security/mac_lomac/mac_lomac.c | |
| parent | 55be30560c859a87d8660f3d2a7459e590252782 (diff) | |
| download | FreeBSD-src-a257862d4b574dd3958622bbe9d606f532b79c6c.zip FreeBSD-src-a257862d4b574dd3958622bbe9d606f532b79c6c.tar.gz | |
When (re)allocating space for an array of pointers to char, use
sizeof(*list), not sizeof(**list). (i.e., sizeof(pointer) rather than
sizeof(char)).
It is possible that this buffer overflow is exploitable, but it was
added after RELENG_5 forked and hasn't been MFCed, so this will not
receive an advisory.
Submitted by: Vitezslav Novy
MFC after: 1 day
Diffstat (limited to 'sys/security/mac_lomac/mac_lomac.c')
0 files changed, 0 insertions, 0 deletions
