Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Seth Forshee <seth.forshee@xxxxxxxxxxxxx>
Subject: Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace
From: "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>
Date: Mon, 26 Jun 2017 13:36:56 -0400
Cc: Adaptec OEM Raid Solutions <aacraid@xxxxxxxxxxxxx>, "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxxxx>, "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>, linux-scsi@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx
In-reply-to: <20170623140422.30320-1-seth.forshee@canonical.com> (Seth Forshee's message of "Fri, 23 Jun 2017 09:04:22 -0500")
Organization: Oracle Corporation
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux)

Seth,

> Both aac_send_raw_srb() and aac_get_hba_info() may copy stack
> allocated structs to userspace without initializing all members of
> these structs. Clear out this memory to prevent information leaks.

Applied to 4.13/scsi-queue. Thank you!

-- 
Martin K. Petersen	Oracle Linux Engineering

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

References:
- [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace
  - From: Seth Forshee

Prev by Date: Re: [PATCH v2 1/2] hpsa: limit transfer length to 1MB
Next by Date: Re: [PATCH] Remove the definition of VLC_SA_RECEIVE_CREDENTIAL
Previous by thread: Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace
Next by thread: [PATCH] scsi: hisi_sas: silence a static checker warning
Index(es):
- Date
- Thread

[Index of Archives] [SCSI Target Devel] [Linux SCSI Target Infrastructure] [Kernel Newbies] [IDE] [Security] [Git] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux ATA RAID] [Linux IIO] [Samba] [Device Mapper]

Powered by Linux