)]}'
{
  "commit": "ee4bb818ae35f68d1f848eae0a7b150a38eb4168",
  "tree": "85a6ba60fc5782d77779f466f1ad5f2ec4330914",
  "parents": [
    "df4e9574a36748c3a4d9b03ffca6b42321a797a9"
  ],
  "author": {
    "name": "Kirill Korotaev",
    "email": "dev@openvz.org",
    "time": "Sat Feb 04 02:16:56 2006 -0800"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@sunset.davemloft.net",
    "time": "Sat Feb 04 23:51:25 2006 -0800"
  },
  "message": "[NETFILTER]: Fix possible overflow in netfilters do_replace()\n\nnetfilter\u0027s do_replace() can overflow on addition within SMP_ALIGN()\nand/or on multiplication by NR_CPUS, resulting in a buffer overflow on\nthe copy_from_user().  In practice, the overflow on addition is\ntriggerable on all systems, whereas the multiplication one might require\nmuch physical memory to be present due to the check above.  Either is\nsufficient to overwrite arbitrary amounts of kernel memory.\n\nI really hate adding the same check to all 4 versions of do_replace(),\nbut the code is duplicate...\n\nFound by Solar Designer during security audit of OpenVZ.org\n\nSigned-Off-By: Kirill Korotaev \u003cdev@openvz.org\u003e\nSigned-Off-By: Solar Designer \u003csolar@openwall.com\u003e\nSigned-off-by: Patrck McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "00729b3604f8b540e507f74e0aabf4cf6e06fa96",
      "old_mode": 33188,
      "old_path": "net/bridge/netfilter/ebtables.c",
      "new_id": "cbd4020cc84d6a142c0128496a80de3909b1f58e",
      "new_mode": 33188,
      "new_path": "net/bridge/netfilter/ebtables.c"
    },
    {
      "type": "modify",
      "old_id": "afe3d8f8177d7df83df0264e20f3072077ff1317",
      "old_mode": 33188,
      "old_path": "net/ipv4/netfilter/arp_tables.c",
      "new_id": "dd1048be8a0115b4cd08591fbd3b29b19e9bda36",
      "new_mode": 33188,
      "new_path": "net/ipv4/netfilter/arp_tables.c"
    },
    {
      "type": "modify",
      "old_id": "2371b2062c2d812468ad62f4fe19d4360e748f41",
      "old_mode": 33188,
      "old_path": "net/ipv4/netfilter/ip_tables.c",
      "new_id": "16f47c675fefd8304d86174f6d4beeebdec6539b",
      "new_mode": 33188,
      "new_path": "net/ipv4/netfilter/ip_tables.c"
    },
    {
      "type": "modify",
      "old_id": "847068fd33676cfd3b6bc510be992baf4ab8d06d",
      "old_mode": 33188,
      "old_path": "net/ipv6/netfilter/ip6_tables.c",
      "new_id": "74ff56c322f47ee45b3b873e4672d0bc9c13511a",
      "new_mode": 33188,
      "new_path": "net/ipv6/netfilter/ip6_tables.c"
    }
  ]
}