Messages in this thread | | | Date | Tue, 09 Nov 2010 22:51:47 +0200 | From | Pekka Enberg <> | Subject | Re: [PATCH] ipc: explicitly clear stack memory in user structs |
| |
On 9.11.2010 22.50, Kees Cook wrote: > Hi Pekka, > > On Tue, Nov 09, 2010 at 10:43:07PM +0200, Pekka Enberg wrote: >> On Tue, Oct 26, 2010 at 2:58 AM, Kees Cook<kees.cook@canonical.com> wrote: >>> CVE-2010-4072 >>> >>> The old shm interface will leak a few bytes of stack contents. Explicitly >>> clear structure using memset instead of C99-style initialization in case >>> there are ever holes in the packing. >>> >>> Cc: stable<stable@kernel.org> >>> Signed-off-by: Kees Cook<kees.cook@canonical.com> >> This looks like a genuine bug fix but I don't see this patch in >> mainline. Why is that? > No one has committed it. I don't know why; I've sent it a few times now.
Andrew, would you mind picking this up and route it to the appropriate person if necessary?
Acked-by: Pekka Enberg <penberg@kernel.org>
Pekka
| |