diff options
| author | Mathias Krause <minipli@googlemail.com> | 2017-08-26 17:08:58 +0200 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2017-11-11 13:33:29 +0000 |
| commit | 6e5fe5f1b4a5b89f37e67d604288fd14d4171653 (patch) | |
| tree | c87eb753977f8dc2df009f0214ee950c33217311 /include/linux/device-mapper.h | |
| parent | 0ad3abfdc63abef74a235389c311d89891929c00 (diff) | |
xfrm_user: fix info leak in xfrm_notify_sa()
commit 50329c8a340c9dea60d837645fcf13fc36bfb84d upstream.
The memory reserved to dump the ID of the xfrm state includes a padding
byte in struct xfrm_usersa_id added by the compiler for alignment. To
prevent the heap info leak, memset(0) the whole struct before filling
it.
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Fixes: 0603eac0d6b7 ("[IPSEC]: Add XFRMA_SA/XFRMA_POLICY for delete notification")
Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'include/linux/device-mapper.h')
0 files changed, 0 insertions, 0 deletions