Messages in this thread | | | Date | Sat, 30 Jul 2005 22:17:49 -0700 | From | Chris Wright <> | Subject | Re: [stable] [patch 1/1] sys_get_thread_area does not clear the returned argument |
| |
* blaisorblade@yahoo.it (blaisorblade@yahoo.it) wrote: > > From: Blaisorblade <blaisorblade@yahoo.it> > CC: <stable@kernel.org> > > sys_get_thread_area does not memset to 0 its struct user_desc info before > copying it to user space... since sizeof(struct user_desc) is 16 while the > actual datas which are filled are only 12 bytes + 9 bits (across the > bitfields), there is a (small) information leak. > > This was already committed to Linus' repository.
Thanks, queued to -stable. -chris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |