| commit | f38a08f7d08308de08bc1091dbc9205990273ca7 | |
| author | Vasiliy Kulikov <segooon@gmail.com> | |
| Wed, 10 Nov 2010 18:14:33 +0000 (10 10:14 -0800) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Thu, 14 Apr 2011 23:53:11 +0000 (14 16:53 -0700) | ||
| tree | 2600c26c2f4aafa79edc6b36791abd55a6583a91 | treesnapshot (tar.gz zip) |
| parent | 5c73dc233c989a8700a4b6a7287d5205f00f44b1 | commitdiff |
net: ax25: fix information leak to userland
commit fe10ae53384e48c51996941b7720ee16995cbcb7 upstream.
Sometimes ax25_getname() doesn't initialize all members of fsa_digipeater
field of fsa struct, also the struct has padding bytes between
sax25_call and sax25_ndigis fields. This structure is then copied to
userland. It leads to leaking of contents of kernel stack memory.
Signed-off-by: Vasiliy Kulikov <segooon@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit fe10ae53384e48c51996941b7720ee16995cbcb7 upstream.
Sometimes ax25_getname() doesn't initialize all members of fsa_digipeater
field of fsa struct, also the struct has padding bytes between
sax25_call and sax25_ndigis fields. This structure is then copied to
userland. It leads to leaking of contents of kernel stack memory.
Signed-off-by: Vasiliy Kulikov <segooon@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| net/ax25/af_ax25.c | diffblobblamehistory |