Messages in this thread | | | From | Steve French <> | Date | Mon, 12 Jan 2015 18:12:57 -0600 | Subject | Re: [PATCH RESEND] cifs: use memzero_explicit to clear stack buffer |
| |
merged into cifs-2.6.git for-next
On Tue, Jan 6, 2015 at 4:59 PM, Herbert Xu <herbert@gondor.apana.org.au> wrote: > On Tue, Jan 06, 2015 at 10:37:00PM +0100, Giel van Schijndel wrote: >> When leaving a function use memzero_explicit instead of memset(0) to >> clear stack allocated buffers. memset(0) may be optimized away. >> >> This particular buffer is highly likely to contain sensitive data which >> we shouldn't leak (it's named 'passwd' after all). >> >> Signed-off-by: Giel van Schijndel <me@mortis.eu> >> Reported-at: http://www.viva64.com/en/b/0299/ >> Reported-by: Andrey Karpov >> Reported-by: Svyatoslav Razmyslov > > Acked-by: Herbert Xu <herbert@gondor.apana.org.au> > > Thanks, > -- > Email: Herbert Xu <herbert@gondor.apana.org.au> > Home Page: http://gondor.apana.org.au/~herbert/ > PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
-- Thanks,
Steve
| |