Peilin Ye 2ec69499b7 rds: Prevent kernel-infoleak in rds_notify_queue_get() ... commit bbc8a99e95 upstream. rds_notify_queue_get() is potentially copying uninitialized kernel stack memory to userspace since the compiler may leave a 4-byte hole at the end of `cmsg`. In 2016 we tried to fix this issue by doing `= { 0 };` on `cmsg`, which unfortunately does not always initialize that 4-byte hole. Fix it by using memset() instead. Cc: stable@vger.kernel.org Fixes: f037590fff ("rds: fix a leak of kernel memory") Fixes: bdbe6fbc6a ("RDS: recv.c") Suggested-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com> Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-08-05 09:59:44 +02:00
..
Kconfig	…
Makefile	…
af_rds.c	…
bind.c	…
cong.c	…
connection.c	…
ib.c	net/rds: Fix error handling in rds_ib_add_one()	2019-10-02 12:16:57 -04:00
ib.h	…
ib_cm.c	rds: ib: update WR sizes when bringing up connection	2019-11-16 12:59:08 -08:00
ib_fmr.c	…
ib_frmr.c	…
ib_mr.h	…
ib_rdma.c	…
ib_recv.c	…
ib_ring.c	…
ib_send.c	…
ib_stats.c	…
ib_sysctl.c	…
info.c	…
info.h	…
loop.c	…
loop.h	…
message.c	net/rds: Use ERR_PTR for rds_message_alloc_sgs()	2020-05-20 08:20:27 +02:00
page.c	…
rdma.c	net/rds: Use ERR_PTR for rds_message_alloc_sgs()	2020-05-20 08:20:27 +02:00
rdma_transport.c	…
rdma_transport.h	…
rds.h	net/rds: Use ERR_PTR for rds_message_alloc_sgs()	2020-05-20 08:20:27 +02:00
rds_single_path.h	…
recv.c	rds: Prevent kernel-infoleak in rds_notify_queue_get()	2020-08-05 09:59:44 +02:00
send.c	net/rds: Use ERR_PTR for rds_message_alloc_sgs()	2020-05-20 08:20:27 +02:00
stats.c	…
sysctl.c	…
tcp.c	…
tcp.h	…
tcp_connect.c	…
tcp_listen.c	…
tcp_recv.c	…
tcp_send.c	…
tcp_stats.c	…
threads.c	…
transport.c	…