kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-16 22:39:48 +00:00
Code Issues Releases Packages Activity
linux/drivers/net/appletalk
History
Willy Tarreau 0c4d7b5277 net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT 
commit 9824dfae57 upstream.

Fields ->dev and ->next of struct ipddp_route may be copied to
userspace on the SIOCFINDIPDDPRT ioctl. This is only accessible
to CAP_NET_ADMIN though. Let's manually copy the relevant fields
instead of using memcpy().

BugLink: http://blog.infosectcbr.com.au/2018/09/linux-kernel-infoleaks.html
Cc: Jann Horn <jannh@google.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2019-03-25 17:32:33 +00:00
..
cops.c PTR_RET is now PTR_ERR_OR_ZERO(): Replace most. 2013-07-15 11:25:01 +09:30
cops.h [APPLETALK]: warning fix 2006-02-13 15:53:41 -08:00
cops_ffdrv.h Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
cops_ltdrv.h Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
ipddp.c net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT 2019-03-25 17:32:33 +00:00
ipddp.h drivers/net/appletalk: endianness 2007-10-10 16:52:05 -07:00
Kconfig appletalk: remove "config IPDDP_DECAP" 2013-03-22 10:21:09 -04:00
ltpc.c PTR_RET is now PTR_ERR_OR_ZERO(): Replace most. 2013-07-15 11:25:01 +09:30
ltpc.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00