Messages in this thread | | | Date | Tue, 9 Nov 2010 12:50:08 -0800 | From | Kees Cook <> | Subject | Re: [PATCH] ipc: explicitly clear stack memory in user structs |
| |
Hi Pekka,
On Tue, Nov 09, 2010 at 10:43:07PM +0200, Pekka Enberg wrote: > On Tue, Oct 26, 2010 at 2:58 AM, Kees Cook <kees.cook@canonical.com> wrote: > > CVE-2010-4072 > > > > The old shm interface will leak a few bytes of stack contents. Explicitly > > clear structure using memset instead of C99-style initialization in case > > there are ever holes in the packing. > > > > Cc: stable <stable@kernel.org> > > Signed-off-by: Kees Cook <kees.cook@canonical.com> > > This looks like a genuine bug fix but I don't see this patch in > mainline. Why is that?
No one has committed it. I don't know why; I've sent it a few times now.
-Kees
-- Kees Cook Ubuntu Security Team
| |