| commit | 757010f026ab3044c594003e216d00a33ed95c56 | [log] [tgz] |
|---|---|---|
| author | Eric W. Biederman <ebiederm@xmission.com> | Thu Nov 12 01:39:06 2009 -0800 |
| committer | Eric W. Biederman <ebiederm@xmission.com> | Thu Nov 12 01:42:31 2009 -0800 |
| tree | 4e9d44c52c34c09b5a347688af20840be7a1c61a | |
| parent | 63395b65972c07edce595c9cc8a983016738cdac [diff] |
sysctl binary: Reorder the tests to process wild card entries first. A malicious user could have passed in a ctl_name of 0 and triggered the well know ctl_name to procname mapping code, instead of the wild card matching code. This is a slight problem as wild card entries don't have procnames, and because in some alternate universe a network device might have ifindex 0. So test for and handle wild card entries first. Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>