projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e3e5fc1) | patch
xfrm_user: fix info leak in build_aevent()
authorMathias Krause <minipli@googlemail.com>
Sat, 26 Aug 2017 15:09:00 +0000 (17:09 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Mon, 28 Aug 2017 08:58:02 +0000 (10:58 +0200)
commit931e79d7a7ddee4709c56b39de169a36804589a1
treee20cdb0427b15340a19bae03b341615b4095b09dtree | snapshot
parente3e5fc1698ae35ac60d075b477e84accb96e2652commit | diff
xfrm_user: fix info leak in build_aevent()

The memory reserved to dump the ID of the xfrm state includes a padding
byte in struct xfrm_usersa_id added by the compiler for alignment. To
prevent the heap info leak, memset(0) the sa_id before filling it.

Cc: Jamal Hadi Salim <jhs@mojatatu.com>
Fixes: d51d081d6504 ("[IPSEC]: Sync series - user")
Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_user.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git