Checkout
Lucas Holt
committed
on 22 Aug
The kernel driver for /dev/midistat implements a handler for read(2).
This handler is not thread-safe, and a multi-threaded … Show more
       The kernel driver for /dev/midistat implements a handler for read(2).

       This handler is not thread-safe, and a multi-threaded program can

       exploit races in the handler to cause it to copy out kernel memory

       outside the boundaries of midistat's data buffer.

Show less