Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1393801
| Path | csiph.com!au2pb.net!feeder.erje.net!2.us.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!newsfeed.straub-nv.de!feeds.phibee-telecom.net!news.panservice.it!bofh.it!news.nic.it!robomod |
|---|---|
| From | Kangjie Lu <kangjielu@gmail.com> |
| Newsgroups | linux.kernel |
| Subject | [PATCH] infoleak fix1 in signal |
| Date | Tue, 03 May 2016 22:40:03 +0200 |
| Message-ID | <ruPgT-6BH-31@gated-at.bofh.it> (permalink) |
| Dkim-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=wWfV0xiLG8lSbDuvwnTN6obp4J3/iawmgwlCqgHU6kU=; b=ODX287lzSdOB8AoXTRK8LdZGtua2WSfKUcwaaZJtRdTkCIu9IDA+e2cvvOMXHXFVfJ lASWIiEryfGk2XIxxrnSXe/CVeG0Nt63Dky1TUaqIJYlsGlY0MvJjpPJ7Gqp6nP9Xe/O 1vFcUI4cThHf4QRH5QQl3lqRvaepsuYzE16tRQVHQuo/UJpJfiA6Jr2bhWDQ55AoBOcy sFr/KuvrhAxnpl0u6qi/YWGC+7A0c/nzTHLqYZsSO2CgMjF5VxsHKXJapD8M2wJFmYim ZpRAtoYGtiZzkZr1yyxBLCQzMfIoM6b99mhRQeccO008hUUaCXfHFbcKzLhsHRCu/HvH Yl0A== |
| X-Google-Dkim-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=wWfV0xiLG8lSbDuvwnTN6obp4J3/iawmgwlCqgHU6kU=; b=mevVUb9CCSs94sBrDw2D5S5KRzd26EwlDMhxLgeUVVH/JNdiRwcU5GlBcM6PlUnVAg n7a9R1Zh2NZWOn7rmZ2/qEeO0aXfItOdoTMmiqqpGVrrMNHW+UI4HZKJKeHPQdYvuMYN 0GZt3nlVoKDw0XmhIx4GO2Bk0oCGqbsKuNosqjdydolvXL8qMy0O31gL4GOsWXrOgS/7 Um1bA8RCouJJZFzjv4JR2wAzySMs7r7M50ai8lFZu4pQZMre06kHpC2/XlV3jgg9EtHH GartAyaOaiERQZbM/ECTQDsNbJ1/BYPEznEh/p6+IgC472oU6xzJTByjz+schQ6+kBpY VAXw== |
| X-Gm-Message-State | AOPr4FXXRXBvS5pFoVqTpYbnKACRKHeKGBTXLINs6MFPXZiSWciTcNIbpvOavvEl2v14CQ== |
| X-Received | by 10.37.18.84 with SMTP id 81mr2406309ybs.117.1462307969364; Tue, 03 May 2016 13:39:29 -0700 (PDT) |
| X-Google-Original-From | Kangjie Lu <kjlu@gatech.edu> |
| X-Mailer | git-send-email 1.9.1 |
| MIME-Version | 1.0 |
| Content-Type | text/plain; charset=UTF-8 |
| Content-Transfer-Encoding | 8bit |
| Sender | robomod@news.nic.it |
| List-ID | <linux-kernel.vger.kernel.org> |
| X-Mailing-List | linux-kernel@vger.kernel.org |
| Approved | robomod@news.nic.it |
| Lines | 23 |
| Organization | linux.* mail to news gateway |
| X-Original-Cc | oleg@redhat.com, peterz@infradead.org, amanieu@gmail.com, linux-kernel@vger.kernel.org, taesoo@gatech.edu, insu@gatech.edu, Kangjie Lu <kjlu@gatech.edu> |
| X-Original-Date | Tue, 3 May 2016 16:42:30 -0400 |
| X-Original-Message-ID | <1462308150-6083-1-git-send-email-kjlu@gatech.edu> |
| X-Original-Sender | linux-kernel-owner@vger.kernel.org |
| Xref | csiph.com linux.kernel:1393801 |
Show key headers only | View raw
The stack object “info” has a total size of 128 bytes; however, only 28 bytes are initialized. The remaining uninitialized bytes are sent to userland via send_signal. Signed-off-by: Kangjie Lu <kjlu@gatech.edu> --- kernel/signal.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel/signal.c b/kernel/signal.c index aa9bf00..f40f0b3 100644 --- a/kernel/signal.c +++ b/kernel/signal.c @@ -1594,6 +1594,7 @@ bool do_notify_parent(struct task_struct *tsk, int sig) sig = SIGCHLD; } + memset(&info, 0, sizeof(info)); info.si_signo = sig; info.si_errno = 0; /* -- 1.9.1
Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread
[PATCH] infoleak fix1 in signal Kangjie Lu <kangjielu@gmail.com> - 2016-05-03 22:40 +0200 Re: [PATCH] infoleak fix1 in signal Oleg Nesterov <oleg@redhat.com> - 2016-05-04 12:40 +0200
csiph-web