odroid-linux/net/dccp
Mathias Krause 500e5c989e dccp: fix info leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO)
[ Upstream commit 7b07f8eb75 ]

The CCID3 code fails to initialize the trailing padding bytes of struct
tfrc_tx_info added for alignment on 64 bit architectures. It that for
potentially leaks four bytes kernel stack via the getsockopt() syscall.
Add an explicit memset(0) before filling the structure to avoid the
info leak.

Signed-off-by: Mathias Krause <minipli@googlemail.com>
Cc: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2012-10-02 09:47:21 -07:00
..
ccids dccp: fix info leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO) 2012-10-02 09:47:21 -07:00
ackvec.c
ackvec.h
ccid.c
ccid.h dccp: check ccid before dereferencing 2012-09-14 10:00:51 -07:00
dccp.h
diag.c
feat.c
feat.h
input.c
ipv4.c net: Compute protocol sequence numbers and fragment IDs using MD5. 2011-08-15 18:31:35 -07:00
ipv6.c net: Compute protocol sequence numbers and fragment IDs using MD5. 2011-08-15 18:31:35 -07:00
ipv6.h
Kconfig
Makefile
minisocks.c
options.c dccp: handle invalid feature options length 2011-05-06 13:05:50 -07:00
output.c inet: Pass flowi to ->queue_xmit(). 2011-05-08 15:28:28 -07:00
probe.c
proto.c
qpolicy.c
sysctl.c
timer.c