The patch titled
ipc/shm.c: fix information leak to userland
has been removed from the -mm tree. Its filename was
ipc-shmc-fix-information-leak-to-userland.patch
This patch was dropped because it was merged into mainline or a subsystem tree
The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/
------------------------------------------------------
Subject: ipc/shm.c: fix information leak to userland
From: Vasiliy Kulikov <segooon@xxxxxxxxx>
Structure shmid_ds is copied to userland with shm_unused{,2,3} fields
unitialized. It leads to leaking of contents of kernel stack memory.
Signed-off-by: Vasiliy Kulikov <segooon@xxxxxxxxx>
Acked-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
Cc: <stable@xxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
---
ipc/shm.c | 1 +
1 file changed, 1 insertion(+)
diff -puN ipc/shm.c~ipc-shmc-fix-information-leak-to-userland ipc/shm.c
--- a/ipc/shm.c~ipc-shmc-fix-information-leak-to-userland
+++ a/ipc/shm.c
@@ -479,6 +479,7 @@ static inline unsigned long copy_shmid_t
{
struct shmid_ds out;
+ memset(&out, 0, sizeof(out));
ipc64_perm_to_ipc_perm(&in->shm_perm, &out.shm_perm);
out.shm_segsz = in->shm_segsz;
out.shm_atime = in->shm_atime;
_
Patches currently in -mm which might be from segooon@xxxxxxxxx are
linux-next.patch
drivers-misc-isl29020c-fix-signedness-bug.patch
drivers-misc-isl29020c-dont-ignore-the-i2c_smbus_read_byte_data-return-value.patch
drivers-misc-apds9802alsc-fix-signedness-bug.patch
memstick-core-fix-device_register-error-handling.patch
--
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
