diff options
| author | Peilin Ye <yepeilin.cs@gmail.com> | 2020-07-31 00:48:38 -0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2020-08-03 15:09:44 -0700 |
| commit | 9aba6c5b49254d5bee927d81593ed4429e91d4ae (patch) | |
| tree | 463c4df1b2822faca26695301e0b30f2fa095c55 /net/openvswitch/dp_notify.c | |
| parent | 038ebb1a713d114d54dbf14868a73181c0c92758 (diff) | |
| download | linux-9aba6c5b49254d5bee927d81593ed4429e91d4ae.tar.bz2 | |
openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
ovs_ct_put_key() is potentially copying uninitialized kernel stack memory
into socket buffers, since the compiler may leave a 3-byte hole at the end
of `struct ovs_key_ct_tuple_ipv4` and `struct ovs_key_ct_tuple_ipv6`. Fix
it by initializing `orig` with memset().
Fixes: 9dd7f8907c37 ("openvswitch: Add original direction conntrack tuple to sw_flow_key.")
Suggested-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/openvswitch/dp_notify.c')
0 files changed, 0 insertions, 0 deletions