This is a note to let you know that I've just added the patch titled
net_sched: Fix stack info leak in cbq_dump_wrr().
to the 3.0-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
net_sched-fix-stack-info-leak-in-cbq_dump_wrr.patch
and it can be found in the queue-3.0 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From af843ef1c6af2a1b384e3e8f0a0468dd28525108 Mon Sep 17 00:00:00 2001
From: "David S. Miller" <davem@xxxxxxxxxxxxx>
Date: Tue, 30 Jul 2013 00:16:21 -0700
Subject: net_sched: Fix stack info leak in cbq_dump_wrr().
From: "David S. Miller" <davem@xxxxxxxxxxxxx>
[ Upstream commit a0db856a95a29efb1c23db55c02d9f0ff4f0db48 ]
Make sure the reserved fields, and padding (if any), are
fully initialized.
Based upon a patch by Dan Carpenter and feedback from
Joe Perches.
Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
net/sched/sch_cbq.c | 1 +
1 file changed, 1 insertion(+)
--- a/net/sched/sch_cbq.c
+++ b/net/sched/sch_cbq.c
@@ -1467,6 +1467,7 @@ static int cbq_dump_wrr(struct sk_buff *
unsigned char *b = skb_tail_pointer(skb);
struct tc_cbq_wrropt opt;
+ memset(&opt, 0, sizeof(opt));
opt.flags = 0;
opt.allot = cl->allot;
opt.priority = cl->priority + 1;
Patches currently in stable-queue which might be from davem@xxxxxxxxxxxxx are
queue-3.0/ipv6-take-rtnl_lock-and-mark-mrt6-table-as-freed-on-namespace-cleanup.patch
queue-3.0/usbnet-do-not-pretend-to-support-sg-tso.patch
queue-3.0/arcnet-cleanup-sizeof-parameter.patch
queue-3.0/sysctl-net-keep-tcp_syn_retries-inside-the-boundary.patch
queue-3.0/net_sched-info-leak-in-atm_tc_dump_class.patch
queue-3.0/af_key-more-info-leaks-in-pfkey-messages.patch
queue-3.0/net_sched-fix-stack-info-leak-in-cbq_dump_wrr.patch
queue-3.0/sctp-fully-initialize-sctp_outq-in-sctp_outq_init.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html