diff options
| author | Vasiliy Kulikov <segoon@openwall.com> | 2010-11-14 09:22:52 +0000 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2010-12-01 16:33:18 -0800 |
| commit | 91a4d157d0c18bd18fd95f90b67cb10d11701cca (patch) | |
| tree | 3e5f469737873ae4bfc13f6f9f21dfcc112d191e /drivers/net | |
| parent | f55864a4f435e47ad413be7016f38877b096bb5b (diff) | |
| download | talos-op-linux-91a4d157d0c18bd18fd95f90b67cb10d11701cca.tar.gz talos-op-linux-91a4d157d0c18bd18fd95f90b67cb10d11701cca.zip | |
IB: Fix information leak in marshalling code
ib_ucm_init_qp_attr() and ucma_init_qp_attr() pass struct ib_uverbs_qp_attr
with reserved, qp_state, {ah_attr,alt_ah_attr}{reserved,->grh.reserved}
fields uninitialized to copy_to_user(). This leads to leaking of
contents of kernel stack memory to userspace.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/net')
0 files changed, 0 insertions, 0 deletions
