projects / ipfire-2.x.git / blame
| Commit | Line | Data |
|---|---|---|
| 82094b55 AF |
1 | From: Eric Dumazet <eric.dumazet@gmail.com> |
| 2 | Date: Wed, 2 Sep 2009 02:40:09 +0000 (+0000) | |
| 3 | Subject: tc: Fix unitialized kernel memory leak | |
| 4 | Patch-mainline: v2.6.31-rc9 | |
| 5 | Git-commit: 16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b | |
| 6 | References: bnc#536467 CVE-2009-3612 CVE-2005-4881 | |
| 7 | ||
| 8 | tc: Fix unitialized kernel memory leak | |
| 9 | ||
| 10 | Three bytes of uninitialized kernel memory are currently leaked to user | |
| 11 | ||
| 12 | Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> | |
| 13 | Reviewed-by: Jiri Pirko <jpirko@redhat.com> | |
| 14 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
| 15 | Acked-by: Jeff Mahoney <jeffm@suse.com> | |
| 16 | --- | |
| 17 | ||
| 18 | net/sched/sch_api.c | 2 ++ | |
| 19 | 1 file changed, 2 insertions(+) | |
| 20 | ||
| 21 | --- a/net/sched/sch_api.c | |
| 22 | +++ b/net/sched/sch_api.c | |
| 23 | @@ -1453,6 +1453,8 @@ static int tc_fill_tclass(struct sk_buff | |
| 24 | nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*tcm), flags); | |
| 25 | tcm = NLMSG_DATA(nlh); | |
| 26 | tcm->tcm_family = AF_UNSPEC; | |
| 27 | + tcm->tcm__pad1 = 0; | |
| 28 | + tcm->tcm__pad2 = 0; | |
| 29 | tcm->tcm_ifindex = qdisc_dev(q)->ifindex; | |
| 30 | tcm->tcm_parent = q->handle; | |
| 31 | tcm->tcm_handle = q->handle; |