projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5fe0d4b) | patch
xfrm_user: fix info leak in xfrm_notify_sa()
authorMathias Krause <[email protected]>
Sat, 26 Aug 2017 15:08:58 +0000 (17:08 +0200)
committerSteffen Klassert <[email protected]>
Mon, 28 Aug 2017 08:58:02 +0000 (10:58 +0200)
commit50329c8a340c9dea60d837645fcf13fc36bfb84d
treec54e85cb149711b653ef3953d6dbe18e4d444615tree | snapshot
parent5fe0d4bd8f86d19f7f24c1ae5a9b6e6a5a52e51acommit | diff
xfrm_user: fix info leak in xfrm_notify_sa()

The memory reserved to dump the ID of the xfrm state includes a padding
byte in struct xfrm_usersa_id added by the compiler for alignment. To
prevent the heap info leak, memset(0) the whole struct before filling
it.

Cc: Herbert Xu <[email protected]>
Fixes: 0603eac0d6b7 ("[IPSEC]: Add XFRMA_SA/XFRMA_POLICY for delete notification")
Signed-off-by: Mathias Krause <[email protected]>
Signed-off-by: Steffen Klassert <[email protected]>
net/xfrm/xfrm_user.c diff | blob | history
John Crispins staging tree