Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace

From	"Martin K. Petersen" <martin.petersen@oracle.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace
Date	2017-06-26 19:40 +0200
Message-ID	<tWG9t-5iW-35@gated-at.bofh.it> (permalink)
References	<tVxrA-3cr-41@gated-at.bofh.it>
Organization	Oracle Corporation

Show all headers | View raw

Seth,

> Both aac_send_raw_srb() and aac_get_hba_info() may copy stack
> allocated structs to userspace without initializing all members of
> these structs. Clear out this memory to prevent information leaks.

Applied to 4.13/scsi-queue. Thank you!

-- 
Martin K. Petersen	Oracle Linux Engineering

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace Seth Forshee <seth.forshee@canonical.com> - 2017-06-23 16:10 +0200
  Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to  userspace Johannes Thumshirn <jthumshirn@suse.de> - 2017-06-23 16:20 +0200
  Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace "Martin K. Petersen" <martin.petersen@oracle.com> - 2017-06-26 19:40 +0200

csiph-web