[prev in list] [next in list] [prev in thread] [next in thread] 

List:       net-snmp-bugs
Subject:    [ net-snmp-Bugs-1017123 ] lm-sensors support trashes memory
From:       "SourceForge.net" <noreply () sourceforge ! net>
Date:       2004-08-27 21:48:38
Message-ID: E1C0oaM-0002IV-00 () sc8-sf-web2 ! sourceforge ! net
[Download RAW message or body]

Bugs item #1017123, was opened at 2004-08-26 15:27
Message generated for change (Settings changed) made by rstory
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=112694&aid=1017123&group_id=12694

Category: agent
Group: linux
Status: Open
Resolution: None
>Priority: 7
Submitted By: Jochen (jochen2)
Assigned to: Nobody/Anonymous (nobody)
Summary: lm-sensors support trashes memory

Initial Comment:
I've got two bug reports from Debian users reporting a
crash of snmpd due to memory trash in lm-sensors support:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=264442
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267691

the problem seems to be in _sensor_load(). If the
number of sensors reported by the kernel is >
MAX_SENSORS  (32), the static array overflows and
static memory is overwritten. array->n is not checked
for out of bound values.

Partly, the problem is fixed in patch 960269, but only
by increasing the array size, so the bug will return
later :-(

Thanks
Jochen

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=112694&aid=1017123&group_id=12694


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Net-snmp-bugs mailing list
Net-snmp-bugs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-bugs
[prev in list] [next in list] [prev in thread] [next in thread]