DEVEL15-dafs-savestatefe-avoid-overflow-20070902
authorJeffrey Hutzelman <jhutz@cmu.edu>
Mon, 3 Sep 2007 05:00:21 +0000 (05:00 +0000)
committerDerrick Brashear <shadow@dementia.org>
Mon, 3 Sep 2007 05:00:21 +0000 (05:00 +0000)
commit29bc90d5d0233f3d2c1f7bbbbe94c05540397b17
tree68c9e57e0d898f690dfd14ad2a7afd6245a818ea
parent41e5372258184833b7335dea2adba353d8330b09
DEVEL15-dafs-savestatefe-avoid-overflow-20070902

The problem is that cb_stateSaveFE() overflows an iovec array
on its stack. When it returns, the PC is loaded with garbage and the
process crashes.

(cherry picked from commit edaa34d3a0ea74bffd886ec40e1c13af7c38a4af)
src/viced/callback.c