diff options
| author | Al Viro <viro@zeniv.linux.org.uk> | 2017-03-25 00:43:43 -0400 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2017-04-06 02:10:31 -0400 |
| commit | 1c87ea4566612ef37e31f6389cbb232bd49cdd45 (patch) | |
| tree | 2332c1659bde70ba5a8f64a88d97c8d0e3474c6f /arch/alpha/kernel | |
| parent | e73a67f7cd471a14bb1351954609e0b0ef5d2187 (diff) | |
| download | linux-1c87ea4566612ef37e31f6389cbb232bd49cdd45.tar.bz2 | |
alpha: fix stack smashing in old_adjtimex(2)
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'arch/alpha/kernel')
| -rw-r--r-- | arch/alpha/kernel/osf_sys.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/alpha/kernel/osf_sys.c b/arch/alpha/kernel/osf_sys.c index 0b961093ca5c..6d76e528ab8f 100644 --- a/arch/alpha/kernel/osf_sys.c +++ b/arch/alpha/kernel/osf_sys.c @@ -1290,7 +1290,7 @@ SYSCALL_DEFINE1(old_adjtimex, struct timex32 __user *, txc_p) /* copy relevant bits of struct timex. */ if (copy_from_user(&txc, txc_p, offsetof(struct timex32, time)) || copy_from_user(&txc.tick, &txc_p->tick, sizeof(struct timex32) - - offsetof(struct timex32, time))) + offsetof(struct timex32, tick))) return -EFAULT; ret = do_adjtimex(&txc); |