Messages in this thread Patch in this message | | | Date | Fri, 04 Sep 2009 13:07:54 -0700 | From | Greg KH <> | Subject | [patch 42/48] rose: Fix rose_getname() leak |
| |
2.6.27-stable review patch. If anyone has any objections, please let us know.
------------------ From: Eric Dumazet <eric.dumazet@gmail.com>
commit 17ac2e9c58b69a1e25460a568eae1b0dc0188c25 upstream.
rose_getname() can leak kernel memory to user.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
--- net/rose/af_rose.c | 1 + 1 file changed, 1 insertion(+)
--- a/net/rose/af_rose.c +++ b/net/rose/af_rose.c @@ -957,6 +957,7 @@ static int rose_getname(struct socket *s struct rose_sock *rose = rose_sk(sk); int n; + memset(srose, 0, sizeof(*srose)); if (peer != 0) { if (sk->sk_state != TCP_ESTABLISHED) return -ENOTCONN;
| |