![]() | |||||||||||||
Messages in this thread |
* blaisorblade@yahoo.it (blaisorblade@yahoo.it) wrote: > > From: Blaisorblade <blaisorblade@yahoo.it> > CC: <stable@kernel.org> > > sys_get_thread_area does not memset to 0 its struct user_desc info before > copying it to user space... since sizeof(struct user_desc) is 16 while the > actual datas which are filled are only 12 bytes + 9 bits (across the > bitfields), there is a (small) information leak. > > This was already committed to Linus' repository. Thanks, queued to -stable. -chris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-07-31 07:21 [from the cache] ©2003-2008 | |||||||||||||