Messages in this thread | | | Date | Thu, 16 Sep 2010 21:55:47 -0700 (PDT) | Subject | Re: [PATCH v2] drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory | From | David Miller <> |
| |
From: Dan Rosenberg <drosenberg@vsecurity.com> Date: Wed, 15 Sep 2010 17:43:12 -0400
> Fixed formatting (tabs and line breaks). > > The CHELSIO_GET_QSET_NUM device ioctl allows unprivileged users to read > 4 bytes of uninitialized stack memory, because the "addr" member of the > ch_reg struct declared on the stack in cxgb_extension_ioctl() is not > altered or zeroed before being copied back to the user. This patch > takes care of it. > > Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Applied.
| |