This is a note to let you know that I've just added the patch titled
net: Zero terminate ifr_name in dev_ifname().
to the 3.18-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
net-zero-terminate-ifr_name-in-dev_ifname.patch
and it can be found in the queue-3.18 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From foo@baz Tue Aug 8 16:54:20 PDT 2017
From: "David S. Miller" <davem@xxxxxxxxxxxxx>
Date: Wed, 19 Jul 2017 13:33:24 -0700
Subject: net: Zero terminate ifr_name in dev_ifname().
From: "David S. Miller" <davem@xxxxxxxxxxxxx>
[ Upstream commit 63679112c536289826fec61c917621de95ba2ade ]
The ifr.ifr_name is passed around and assumed to be NULL terminated.
Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
net/core/dev_ioctl.c | 1 +
1 file changed, 1 insertion(+)
--- a/net/core/dev_ioctl.c
+++ b/net/core/dev_ioctl.c
@@ -28,6 +28,7 @@ static int dev_ifname(struct net *net, s
if (copy_from_user(&ifr, arg, sizeof(struct ifreq)))
return -EFAULT;
+ ifr.ifr_name[IFNAMSIZ-1] = 0;
error = netdev_get_name(net, ifr.ifr_name, ifr.ifr_ifindex);
if (error)
Patches currently in stable-queue which might be from davem@xxxxxxxxxxxxx are
queue-3.18/r8169-add-support-for-rtl8168-series-add-on-card.patch
queue-3.18/kaweth-fix-oops-upon-failed-memory-allocation.patch
queue-3.18/isdn-fix-a-sleep-in-atomic-bug.patch
queue-3.18/sctp-don-t-dereference-ptr-before-leaving-_sctp_walk_-params-errors.patch
queue-3.18/ipv6-fix-possible-deadlock-in-ip6_fl_purge-ip6_fl_gc.patch
queue-3.18/net-sched-fix-soft-lockup-in-tc_classify.patch
queue-3.18/sctp-fix-the-check-for-_sctp_walk_params-and-_sctp_walk_errors.patch
queue-3.18/packet-fix-use-after-free-in-prb_retire_rx_blk_timer_expired.patch
queue-3.18/rtnetlink-allocate-more-memory-for-dev_set_mac_address.patch
queue-3.18/net-skb_needs_check-accepts-checksum_none-for-tx.patch
queue-3.18/sh_eth-fix-ethtool-operation-crash-when-net-device-is-down.patch
queue-3.18/ipv6-should-use-consistent-conditional-judgement-for-ip6-fragment-between-__ip6_append_data-and-ip6_finish_output.patch
queue-3.18/net-sctp-fix-race-for-one-to-many-sockets-in-sendmsg-s-auto-associate.patch
queue-3.18/net-phy-do-not-perform-software-reset-for-generic-phy.patch
queue-3.18/vlan-propagate-mac-address-to-vlans.patch
queue-3.18/net-mlx4-remove-bug_on-from-icm-allocation-routine.patch
queue-3.18/mcs7780-fix-initialization-when-config_vmap_stack-is-enabled.patch
queue-3.18/net-zero-terminate-ifr_name-in-dev_ifname.patch
queue-3.18/net-phy-correctly-process-phy_halted-in-phy_stop_machine.patch
queue-3.18/ipv6-avoid-overflow-of-offset-in-ip6_find_1stfragopt.patch
queue-3.18/xen-netback-correctly-schedule-rate-limited-queues.patch
queue-3.18/net-reduce-skb_warn_bad_offload-noise.patch
queue-3.18/dccp-fix-a-memleak-for-dccp_feat_init-err-process.patch
queue-3.18/kaweth-fix-firmware-download.patch
queue-3.18/ipv4-initialize-fib_trie-prior-to-register_netdev_notifier-call.patch