]> git.baikalelectronics.ru Git - kernel.git/commit
net/smc: Prevent kernel-infoleak in __smc_diag_dump()
authorPeilin Ye <yepeilin.cs@gmail.com>
Thu, 20 Aug 2020 14:30:52 +0000 (16:30 +0200)
committerDavid S. Miller <davem@davemloft.net>
Thu, 20 Aug 2020 19:07:31 +0000 (12:07 -0700)
commit27acd3ae4a92a2543334962c5a4a7406ba435be3
tree75d0baf07941877876df7f4fb99e3bb73551be9d
parent8391a3314b195ac765853f05ef6728632bce0cd6
net/smc: Prevent kernel-infoleak in __smc_diag_dump()

__smc_diag_dump() is potentially copying uninitialized kernel stack memory
into socket buffers, since the compiler may leave a 4-byte hole near the
beginning of `struct smcd_diag_dmbinfo`. Fix it by initializing `dinfo`
with memset().

Fixes: 7a912d5e0e93 ("net/smc: add SMC-D diag support")
Suggested-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Signed-off-by: Ursula Braun <ubraun@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/smc/smc_diag.c