https://github.com/torvalds/linux
Revision 91a4d157d0c18bd18fd95f90b67cb10d11701cca authored by Vasiliy Kulikov on 14 November 2010, 09:22:52 UTC, committed by Roland Dreier on 02 December 2010, 00:33:18 UTC
ib_ucm_init_qp_attr() and ucma_init_qp_attr() pass struct ib_uverbs_qp_attr
with reserved, qp_state, {ah_attr,alt_ah_attr}{reserved,->grh.reserved}
fields uninitialized to copy_to_user().  This leads to leaking of
contents of kernel stack memory to userspace.

Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
1 parent f55864a
History
Tip revision: 91a4d157d0c18bd18fd95f90b67cb10d11701cca authored by Vasiliy Kulikov on 14 November 2010, 09:22:52 UTC
IB: Fix information leak in marshalling code
Tip revision: 91a4d15
File Mode Size
Documentation
arch
block
crypto
drivers
firmware
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
tools
usr
virt
.gitignore -rw-r--r-- 936 bytes
.mailmap -rw-r--r-- 3.9 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 91.8 KB
Kbuild -rw-r--r-- 2.5 KB
MAINTAINERS -rw-r--r-- 177.0 KB
Makefile -rw-r--r-- 51.2 KB
README -rw-r--r-- 17.0 KB
REPORTING-BUGS -rw-r--r-- 3.3 KB

README

back to top