Messages in this thread | | | Date | Sun, 10 Jan 2016 18:01:36 -0500 (EST) | Subject | Re: [PATCH] net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory | From | David Miller <> |
| |
From: Sasha Levin <sasha.levin@oracle.com> Date: Thu, 7 Jan 2016 14:52:43 -0500
> proc_dostring() needs an initialized destination string, while the one > provided in proc_sctp_do_hmac_alg() contains stack garbage. > > Thus, writing to cookie_hmac_alg would strlen() that garbage and end up > accessing invalid memory. > > Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic") > Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
Applied and queued up for -stable, thanks.
| |