]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
[PATCH] sys_get_thread_area does not clear the returned argument
authorBlaisorblade <blaisorblade@yahoo.it>
Sat, 30 Jul 2005 19:07:02 +0000 (21:07 +0200)
committerChris Wright <chrisw@osdl.org>
Fri, 5 Aug 2005 07:04:23 +0000 (00:04 -0700)
commit685dd5ff54ea9b3333df75427bd91d9601813c23
tree25c4613aece4f422a707e005d0f565286d85b5c8
parent60372783e59079bdfd3ba0477e1907669249a489
[PATCH] sys_get_thread_area does not clear the returned argument

CC: <stable@kernel.org>
sys_get_thread_area does not memset to 0 its struct user_desc info before
copying it to user space...  since sizeof(struct user_desc) is 16 while the
actual datas which are filled are only 12 bytes + 9 bits (across the
bitfields), there is a (small) information leak.

This was already committed to Linus' repository.

Signed-off-by: Paolo 'Blaisorblade' Giarrusso <blaisorblade@yahoo.it>
Signed-off-by: Chris Wright <chrisw@osdl.org>
arch/i386/kernel/process.c