)]}'
{
  "commit": "3fb0cb5d0f8b915a75677e8e8e4a4a4e481f03f7",
  "tree": "8b1306cc288c0d700ff23a88b26c8d7656fc8d6c",
  "parents": [
    "aa1e816fc92215f94bdfd90107baae8fdc2440d1"
  ],
  "author": {
    "name": "Heikki Orsila",
    "email": "shd@jolt.modeemi.cs.tut.fi",
    "time": "Tue Apr 18 22:21:55 2006 -0700"
  },
  "committer": {
    "name": "Linus Torvalds",
    "email": "torvalds@g5.osdl.org",
    "time": "Wed Apr 19 09:13:52 2006 -0700"
  },
  "message": "[PATCH] Open IPMI BT overflow\n\nI was looking into random driver code and found a suspicious looking\nmemcpy() in drivers/char/ipmi/ipmi_bt_sm.c on 2.6.17-rc1:\n\n\tif ((size \u003c 2) || (size \u003e IPMI_MAX_MSG_LENGTH))\n\t\treturn -1;\n\t...\n\tmemcpy(bt-\u003ewrite_data + 3, data + 1, size - 1);\n\nwhere sizeof bt-\u003ewrite_data is IPMI_MAX_MSG_LENGTH.  It looks like the\nmemcpy would overflow by 2 bytes if size \u003d\u003d IPMI_MAX_MSG_LENGTH.  A patch\nattached to limit size to (IPMI_MAX_LENGTH - 2).\n\nCc: Corey Minyard \u003cminyard@acm.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "58dcdee1cd719ab3d165907fb76f53c6e55c5db6",
      "old_mode": 33188,
      "old_path": "drivers/char/ipmi/ipmi_bt_sm.c",
      "new_id": "0030cd8e2e956cb436ae781c854ba41df23058a9",
      "new_mode": 33188,
      "new_path": "drivers/char/ipmi/ipmi_bt_sm.c"
    }
  ]
}