Re: [Full-disclosure] linux procfs vulnerablity

[Karl Janmar <karl@xxxxxxxxxxxxxxxxxxxx>]

The arch is x86 and I ignore the rest of your comments, maybe you have to think 
a little more?

- karl

coderman wrote:
> On 12/23/05, Karl Janmar <karl@xxxxxxxxxxxxxxxxxxxx> wrote:
>
> > ...
> > I have found one flaw in Linux procfs code that make the kernel disclose memory.
>
>
> i'd love to see you exploit this! rly!
>
>
>
> > fs/proc/proc_misc.c:74
> > ...
> > if (len <= off+count) *eof = 1;
> > ...
> > off is a off_t and count is a int.
>
>
> what arch?  on intel assign a s32 to int? the sky is falling...
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/