linux/net/bluetooth
Mathias Krause dbcba7a54a Bluetooth: L2CAP - Fix info leak via getsockname()
[ Upstream commit 792039c73c ]

The L2CAP code fails to initialize the l2_bdaddr_type member of struct
sockaddr_l2 and the padding byte added for alignment. It that for leaks
two bytes kernel stack via the getsockname() syscall. Add an explicit
memset(0) before filling the structure to avoid the info leak.

Signed-off-by: Mathias Krause <minipli@googlemail.com>
Cc: Marcel Holtmann <marcel@holtmann.org>
Cc: Gustavo Padovan <gustavo@padovan.org>
Cc: Johan Hedberg <johan.hedberg@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2012-10-02 10:29:36 -07:00
..
bnep Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
cmtp Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
hidp Bluetooth: Use kernel int types instead of ones from stdint.h 2012-02-27 12:34:39 +02:00
rfcomm Bluetooth: RFCOMM - Fix info leak via getsockname() 2012-10-02 10:29:36 -07:00
af_bluetooth.c Bluetooth: notify userspace of security level change 2012-05-14 13:51:25 -04:00
hci_conn.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
hci_core.c Bluetooth: mgmt: Fix device_connected sending order 2012-05-14 13:56:15 -04:00
hci_event.c Bluetooth: Fix legacy pairing with some devices 2012-09-14 10:00:18 -07:00
hci_sock.c Bluetooth: HCI - Fix info leak via getsockname() 2012-10-02 10:29:36 -07:00
hci_sysfs.c Bluetooth: Use proper datatypes in release-callbacks 2012-02-13 17:01:38 +02:00
Kconfig Bluetooth: Fix Kconfig help description 2012-02-29 18:50:25 +02:00
l2cap_core.c Bluetooth: Fix legacy pairing with some devices 2012-09-14 10:00:18 -07:00
l2cap_sock.c Bluetooth: L2CAP - Fix info leak via getsockname() 2012-10-02 10:29:36 -07:00
lib.c Bluetooth: Add logging functions bt_info and bt_err 2012-02-17 11:33:17 +02:00
Makefile Bluetooth: Always compile SCO and L2CAP in Bluetooth Core 2011-12-21 02:21:08 -02:00
mgmt.c Bluetooth: hci_persistent_key should return bool 2012-04-16 12:57:40 +03:00
sco.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
smp.c Bluetooth: Set security level on incoming pairing request 2012-03-08 02:26:04 -03:00