From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932572Ab0KCSgX (ORCPT ); Wed, 3 Nov 2010 14:36:23 -0400 Received: from mail-yx0-f174.google.com ([209.85.213.174]:40022 "EHLO mail-yx0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932197Ab0KCSgS (ORCPT ); Wed, 3 Nov 2010 14:36:18 -0400 Date: Wed, 3 Nov 2010 14:36:30 -0400 From: "Gustavo F. Padovan" To: Marcel Holtmann Cc: Vasiliy Kulikov , kernel-janitors@vger.kernel.org, "David S. Miller" , Eric Dumazet , linux-bluetooth@vger.kernel.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] bluetooth: cmtp: fix information leak to userland Message-ID: <20101103183630.GC17943@vigoh> References: <1288448787-5848-1-git-send-email-segooon@gmail.com> <1288712158.3322.179.camel@aeonflux> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1288712158.3322.179.camel@aeonflux> User-Agent: Mutt/1.5.20 (2009-06-14) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org * Marcel Holtmann [2010-11-02 16:35:58 +0100]: > Hi Vasiliy, > > > Structure cmtp_conninfo is copied to userland with some padding fields > > unitialized. It leads to leaking of contents of kernel stack memory. > > > > Signed-off-by: Vasiliy Kulikov > > Acked-by: Marcel Holtmann Applied, thanks. -- Gustavo F. Padovan ProFUSION embedded systems - http://profusion.mobi From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Gustavo F. Padovan" Subject: Re: [PATCH] bluetooth: cmtp: fix information leak to userland Date: Wed, 3 Nov 2010 14:36:30 -0400 Message-ID: <20101103183630.GC17943@vigoh> References: <1288448787-5848-1-git-send-email-segooon@gmail.com> <1288712158.3322.179.camel@aeonflux> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Vasiliy Kulikov , kernel-janitors-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, "David S. Miller" , Eric Dumazet , linux-bluetooth-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, netdev-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: Marcel Holtmann Return-path: Content-Disposition: inline In-Reply-To: <1288712158.3322.179.camel@aeonflux> Sender: linux-bluetooth-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-Id: netdev.vger.kernel.org * Marcel Holtmann [2010-11-02 16:35:58 +0100]: > Hi Vasiliy, > > > Structure cmtp_conninfo is copied to userland with some padding fields > > unitialized. It leads to leaking of contents of kernel stack memory. > > > > Signed-off-by: Vasiliy Kulikov > > Acked-by: Marcel Holtmann Applied, thanks. -- Gustavo F. Padovan ProFUSION embedded systems - http://profusion.mobi From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Gustavo F. Padovan" Date: Wed, 03 Nov 2010 18:36:30 +0000 Subject: Re: [PATCH] bluetooth: cmtp: fix information leak to userland Message-Id: <20101103183630.GC17943@vigoh> List-Id: References: <1288448787-5848-1-git-send-email-segooon@gmail.com> <1288712158.3322.179.camel@aeonflux> In-Reply-To: <1288712158.3322.179.camel@aeonflux> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Marcel Holtmann Cc: Vasiliy Kulikov , kernel-janitors@vger.kernel.org, "David S. Miller" , Eric Dumazet , linux-bluetooth@vger.kernel.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org * Marcel Holtmann [2010-11-02 16:35:58 +0100]: > Hi Vasiliy, > > > Structure cmtp_conninfo is copied to userland with some padding fields > > unitialized. It leads to leaking of contents of kernel stack memory. > > > > Signed-off-by: Vasiliy Kulikov > > Acked-by: Marcel Holtmann Applied, thanks. -- Gustavo F. Padovan ProFUSION embedded systems - http://profusion.mobi