diff options
author | Mathias Krause <minipli@googlemail.com> | 2012-09-19 11:33:41 +0000 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2012-09-20 18:08:40 -0400 |
commit | 1f86840f897717f86d523a13e99a447e6a5d2fa5 (patch) | |
tree | 03c775c5e0db9f885d7dd24fd7f4d8ebf0caf2eb /firmware/sb16 | |
parent | 7b789836f434c87168eab067cfbed1ec4783dffd (diff) | |
download | linux-1f86840f897717f86d523a13e99a447e6a5d2fa5.tar.bz2 |
xfrm_user: fix info leak in copy_to_user_tmpl()
The memory used for the template copy is a local stack variable. As
struct xfrm_user_tmpl contains multiple holes added by the compiler for
alignment, not initializing the memory will lead to leaking stack bytes
to userland. Add an explicit memset(0) to avoid the info leak.
Initial version of the patch by Brad Spengler.
Cc: Brad Spengler <spender@grsecurity.net>
Signed-off-by: Mathias Krause <minipli@googlemail.com>
Acked-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'firmware/sb16')
0 files changed, 0 insertions, 0 deletions