Displaying 1 result from an estimated 1 matches for "autofs_packet_miss".
1999 Feb 22
0
(Fwd) Linux autofs overflow in 2.0.36+
...#39;s the packet down the pipe connecting the
module with automountd.
The Overflow
The problem occurs when 'wq' is copied to 'pkt'. Before this point,
the path name was shuffled around via pointers. 'pkt' is defined as:
struct autofs_packet_missing pkt;
struct autofs_packet_missing {
struct autofs_packet_hdr hdr;
autofs_wqt_t wait_queue_token;
int len;
char name[NAME_MAX+1];
};
NAME_MAX is 255, making pkt.name a 256 byte buffer.
pkt.name is copied using this method:
pkt.len = wq->le...