Messages in this thread Patch in this message | | | Date | Fri, 04 Sep 2009 13:07:48 -0700 | From | Greg KH <> | Subject | [patch 36/48] econet: Fix econet_getname() leak |
| |
2.6.27-stable review patch. If anyone has any objections, please let us know.
------------------ From: Eric Dumazet <eric.dumazet@gmail.com>
commit 80922bbb12a105f858a8f0abb879cb4302d0ecaa upstream.
econet_getname() can leak kernel memory to user.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
--- net/econet/af_econet.c | 1 + 1 file changed, 1 insertion(+)
--- a/net/econet/af_econet.c +++ b/net/econet/af_econet.c @@ -520,6 +520,7 @@ static int econet_getname(struct socket if (peer) return -EOPNOTSUPP; + memset(sec, 0, sizeof(*sec)); mutex_lock(&econet_mutex); sk = sock->sk;
| |