releases/2.6.27.46/tc-fix-unitialized-kernel-memory-leak.patch

   1 From 16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b Mon Sep 17 00:00:00 2001
   2 From: Eric Dumazet <eric.dumazet@gmail.com>
   3 Date: Wed, 2 Sep 2009 02:40:09 +0000
   4 Subject: tc: Fix unitialized kernel memory leak
   5
   6 From: Eric Dumazet <eric.dumazet@gmail.com>
   7
   8 commit 16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b upstream.
   9
  10 Three bytes of uninitialized kernel memory are currently leaked to user
  11
  12 Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
  13 Reviewed-by: Jiri Pirko <jpirko@redhat.com>
  14 Signed-off-by: David S. Miller <davem@davemloft.net>
  15 Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  16
  17 ---
  18  net/sched/sch_api.c |    2 ++
  19  1 file changed, 2 insertions(+)
  20
  21 --- a/net/sched/sch_api.c
  22 +++ b/net/sched/sch_api.c
  23 @@ -1453,6 +1453,8 @@ static int tc_fill_tclass(struct sk_buff
  24         nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*tcm), flags);
  25         tcm = NLMSG_DATA(nlh);
  26         tcm->tcm_family = AF_UNSPEC;
  27 +       tcm->tcm__pad1 = 0;
  28 +       tcm->tcm__pad2 = 0;
  29         tcm->tcm_ifindex = qdisc_dev(q)->ifindex;
  30         tcm->tcm_parent = q->handle;
  31         tcm->tcm_handle = q->handle;