Messages in this thread | | | From | Mathias Krause <> | Subject | [PATCH 0/2] Fix info leaks on export for udf and isofs | Date | Thu, 12 Jul 2012 08:46:53 +0200 |
| |
Al, Jan,
this patch set fixes info leaks in isofs and udf. Both file systems fail to initialize all bytes of the f_handle byte array when creating a handle for a path pointing to a directory. This memory gets copied to userland and that for is a leak of uninitialized heap data to userland that should be fixed.
This info leak can be triggered locally by using the name_to_handle_at() syscall.
Regards,
Mathias Krause (2): isofs: avoid info leak on export udf: avoid info leak on export
fs/isofs/export.c | 1 + fs/udf/namei.c | 1 + 2 files changed, 2 insertions(+)
-- 1.7.10.4
| |