)]}'
{
  "commit": "f63ae56e4e97fb12053590e41a4fa59e7daa74a4",
  "tree": "e5087c68ff1c9387a8bed84e4b2ab30d19e02852",
  "parents": [
    "546ae796bfac6399e30da4b5af2cf7a6d0f8a4ec"
  ],
  "author": {
    "name": "Dan Carpenter",
    "email": "error27@gmail.com",
    "time": "Fri Oct 08 09:03:07 2010 +0200"
  },
  "committer": {
    "name": "James Bottomley",
    "email": "James.Bottomley@suse.de",
    "time": "Mon Oct 25 15:01:14 2010 -0500"
  },
  "message": "[SCSI] gdth: integer overflow in ioctl\n\ngdth_ioctl_alloc() takes the size variable as an int.\ncopy_from_user() takes the size variable as an unsigned long.\ngen.data_len and gen.sense_len are unsigned longs.\nOn x86_64 longs are 64 bit and ints are 32 bit.\n\nWe could pass in a very large number and the allocation would truncate\nthe size to 32 bits and allocate a small buffer.  Then when we do the\ncopy_from_user(), it would result in a memory corruption.\n\nCC: stable@kernel.org\nSigned-off-by: Dan Carpenter \u003cerror27@gmail.com\u003e\nSigned-off-by: James Bottomley \u003cJames.Bottomley@suse.de\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5a3f93101017b601fe98b2bbf12d9b55fd27152b",
      "old_mode": 33188,
      "old_path": "drivers/scsi/gdth.c",
      "new_id": "841101846b88fe98e55a6c601b013ef9119cdf4a",
      "new_mode": 33188,
      "new_path": "drivers/scsi/gdth.c"
    }
  ]
}