linux/net/rose
Mathias Krause 1a4dc01afc rose: fix info leak via msg_name in rose_recvmsg()
[ Upstream commit 4a184233f2 ]

The code in rose_recvmsg() does not initialize all of the members of
struct sockaddr_rose/full_sockaddr_rose when filling the sockaddr info.
Nor does it initialize the padding bytes of the structure inserted by
the compiler for alignment. This will lead to leaking uninitialized
kernel stack bytes in net/socket.c.

Fix the issue by initializing the memory used for sockaddr info with
memset(0).

Signed-off-by: Mathias Krause <minipli@googlemail.com>
Cc: Ralf Baechle <ralf@linux-mips.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-05-01 09:41:05 -07:00
..
af_rose.c rose: fix info leak via msg_name in rose_recvmsg() 2013-05-01 09:41:05 -07:00
Makefile
rose_dev.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2012-04-02 17:53:39 -07:00
rose_in.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_link.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_loopback.c rose: Add length checks to CALL_REQUEST parsing 2011-03-27 17:59:04 -07:00
rose_out.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_route.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_subr.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
rose_timer.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
sysctl_net_rose.c sysctl net: Remove unused binary sysctl code 2009-11-12 02:05:06 -08:00