Details
-
Bug
-
Resolution: Fixed
-
Minor
-
None
-
3
-
9223372036854775807
Description
That function takes a pointer, decrements it and dereference the new address. However we have no idea if the page it's in is readable or even exists. Such dereference would cause an oops.
Both patches now landed for 2.9