Peilin Ye d429362b3d net/smc: Prevent kernel-infoleak in __smc_diag_dump() ...

[ Upstream commit ce51f63e63 ]

__smc_diag_dump() is potentially copying uninitialized kernel stack memory
into socket buffers, since the compiler may leave a 4-byte hole near the
beginning of `struct smcd_diag_dmbinfo`. Fix it by initializing `dinfo`
with memset().

Fixes: 4b1b7d3b30 ("net/smc: add SMC-D diag support")
Suggested-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Signed-off-by: Ursula Braun <ubraun@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-09-03 11:26:40 +02:00

..

af_smc.c

…

Kconfig

…

Makefile

…

smc_cdc.c

…

smc_cdc.h

…

smc_clc.c

…

smc_clc.h

…

smc_close.c

…

smc_close.h

…

smc_core.c

…

smc_core.h

…

smc_diag.c

…

smc_ib.c

…

smc_ib.h

…

smc_ism.c

…

smc_ism.h

…

smc_llc.c

…

smc_llc.h

…

smc_netns.h

…

smc_pnet.c

…

smc_pnet.h

…

smc_rx.c

…

smc_rx.h

…

smc_tx.c

…

smc_tx.h

…

smc_wr.c

…

smc_wr.h

…

smc.h

…