Re: [PATCH] KEYS: potential uninitialized variable

From	David Howells <dhowells@redhat.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH] KEYS: potential uninitialized variable
Date	2016-06-16 17:00 +0200
Message-ID	<rKGVZ-1bI-39@gated-at.bofh.it> (permalink)
References	<rKGMi-18f-15@gated-at.bofh.it>
Organization	Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903

Show all headers | View raw

David Howells <dhowells@redhat.com> wrote:

> From: Dan Carpenter <dan.carpenter@oracle.com>
> 
> If __key_link_begin() failed then "edit" would be uninitialized.  I've
> added a check to fix that.
> 
> This allows a random user to crash the kernel, though it's quite difficult
> to achieve.  There are three ways it can be done as the user would have to
> cause an error to occur in __key_link():
>
> ...

I forgot to mention, this fixes CVE-2016-4470.

David

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH] KEYS: potential uninitialized variable David Howells <dhowells@redhat.com> - 2016-06-16 16:50 +0200
  Re: [PATCH] KEYS: potential uninitialized variable David Howells <dhowells@redhat.com> - 2016-06-16 17:00 +0200

csiph-web