When msg_namelen is non-zero the sockaddr info gets filled out, as requested, but the code fails to initialize the padding bytes of struct sockaddr_ax25 inserted by the compiler for alignment. Additionally the msg_namelen value is updated to sizeof(struct full_sockaddr_ax25) but is not always filled up to this size. Both issues lead to the fact that the code will leak uninitialized kernel stack bytes in net/socket.c. Fix both issues by initializing the memory with memset(0). Cc: Ralf Baechle <ralf@linux-mips.org> Signed-off-by: Mathias Krause <minipli@googlemail.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
TODO | ||
af_ax25.c | ||
ax25_addr.c | ||
ax25_dev.c | ||
ax25_ds_in.c | ||
ax25_ds_subr.c | ||
ax25_ds_timer.c | ||
ax25_iface.c | ||
ax25_in.c | ||
ax25_ip.c | ||
ax25_out.c | ||
ax25_route.c | ||
ax25_std_in.c | ||
ax25_std_subr.c | ||
ax25_std_timer.c | ||
ax25_subr.c | ||
ax25_timer.c | ||
ax25_uid.c | ||
sysctl_net_ax25.c |