]> git.baikalelectronics.ru Git - kernel.git/commit
gre: information leak in ip6_tnl_ioctl()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 16 Aug 2012 03:14:04 +0000 (03:14 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 20 Aug 2012 09:21:30 +0000 (02:21 -0700)
commit7e0a29a9ac8a1c4ee0988ded1ef69fbd2bcf946e
treed8d85f656645a41afa15ff5ac11cf4e5eddf841f
parent950d192b75eb842c31bd0791c9023143cd1627d6
gre: information leak in ip6_tnl_ioctl()

There is a one byte hole between p->hop_limit and p->flowinfo where
stack memory is leaked to the user.  This was introduced in 049b289281
"gre: Support GRE over IPv6".

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
net/ipv6/ip6_tunnel.c