LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   patch: sysklogd 2.4.0: prevent overread when scanning the kernel message buffer (https://www.linuxquestions.org/questions/slackware-14/patch-sysklogd-2-4-0-prevent-overread-when-scanning-the-kernel-message-buffer-4175713745/)

metaed 06-22-2022 04:42 PM

patch: sysklogd 2.4.0: prevent overread when scanning the kernel message buffer
 
I patched troglobit sysklogd 2.4.0 to avoid the possibility of advancing past the end of a null terminated string, by always testing the value at the pointer before advancing the pointer.

Patch is here: https://github.com/troglobit/sysklogd/pull/52/files

I do not know of a real-world condition that could trigger this buffer overread. A truncated kernel message buffer would trigger it, and I don't think that's a realistic possibility. But processes running as root should bend over backwards to avoid overread.

Mark Pettit 06-23-2022 12:02 AM

Computer says NO.


All times are GMT -5. The time now is 09:46 PM.