)]}'
{
  "commit": "7e2685620de304fd13fe71c4ee2df7367d0e5efe",
  "tree": "53eceb34f56375de0b9a9699f1a6ca06ad0e7a6e",
  "parents": [
    "ad84b52a71414a48d02a7f4d4d52cd8b69c444d8"
  ],
  "author": {
    "name": "Kees Cook",
    "email": "keescook@chromium.org",
    "time": "Thu Nov 14 14:31:58 2013 -0800"
  },
  "committer": {
    "name": "Gerrit - the friendly Code Review server",
    "email": "code-review@localhost",
    "time": "Mon Sep 15 03:03:48 2014 -0700"
  },
  "message": "vsprintf: ignore %n again\n\nThis ignores %n in printf again, as was originally documented.\nImplementing %n poses a greater security risk than utility, so it should\nstay ignored.  To help anyone attempting to use %n, a warning will be\nemitted if it is encountered.\n\nBased on an earlier patch by Joe Perches.\n\nBecause %n was designed to write to pointers on the stack, it has been\nfrequently used as an attack vector when bugs are found that leak\nuser-controlled strings into functions that ultimately process format\nstrings.  While this class of bug can still be turned into an\ninformation leak, removing %n eliminates the common method of elevating\nsuch a bug into an arbitrary kernel memory writing primitive,\nsignificantly reducing the danger of this class of bug.\n\nFor seq_file users that need to know the length of a written string for\npadding, please see seq_setwidth() and seq_pad() instead.\n\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Joe Perches \u003cjoe@perches.com\u003e\nCc: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nCc: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nGit-commit: 9196436ab2f713b823a2ba2024cb69f40b2f54a5\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nCRs-fixed: 665291\nChange-Id: Id191acaf66e3c395df92b0a77331269b525e3cad\nSigned-off-by: David Brown \u003cdavidb@codeaurora.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f5dfe0ca34f60c25a1367da581dd0c842db1ff87",
      "old_mode": 33188,
      "old_path": "lib/vsprintf.c",
      "new_id": "f0dcd2ea9f261c61a979952bd6d3571300d626f0",
      "new_mode": 33188,
      "new_path": "lib/vsprintf.c"
    }
  ]
}