diff options
| author | Dan Rosenberg <drosenberg@vsecurity.com> | 2010-11-23 11:02:13 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2010-11-28 11:32:30 -0800 |
| commit | 3c6f27bf33052ea6ba9d82369fb460726fb779c0 (patch) | |
| tree | 0159223767a5edaaad3133df1bc4f061da0723a0 | |
| parent | 462ca99c2ff6caae94dde5c05b56b54f6c01602a (diff) | |
| download | linux-3c6f27bf33052ea6ba9d82369fb460726fb779c0.tar.gz linux-3c6f27bf33052ea6ba9d82369fb460726fb779c0.tar.bz2 linux-3c6f27bf33052ea6ba9d82369fb460726fb779c0.zip | |
DECnet: don't leak uninitialized stack byte
A single uninitialized padding byte is leaked to userspace.
Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com>
CC: stable <stable@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/decnet/af_decnet.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/decnet/af_decnet.c b/net/decnet/af_decnet.c index a76b78de679f..6f97268ed85f 100644 --- a/net/decnet/af_decnet.c +++ b/net/decnet/af_decnet.c @@ -1556,6 +1556,8 @@ static int __dn_getsockopt(struct socket *sock, int level,int optname, char __us if (r_len > sizeof(struct linkinfo_dn)) r_len = sizeof(struct linkinfo_dn); + memset(&link, 0, sizeof(link)); + switch(sock->state) { case SS_CONNECTING: link.idn_linkstate = LL_CONNECTING; |