All of
 help / color / mirror / Atom feed
From: Jason Gunthorpe <>
To: Dan Carpenter <>
Cc: Haimin Zhang <>,
	Wenpeng Liang <>,
	Leon Romanovsky <>,
	Weihang Li <>,
	YueHaibing <>,
	Xiaofei Tan <>,
	Dasaratharaman Chandramouli 
	Doug Ledford <>,
	Sean Hefty <>,
	Don Hiatt <>, Ira Weiny <>,,,
	Greg KH <>
Subject: Re: [PATCH v2] RDMA/ucma: RDMA/ucma: fix a kernel-infoleak in ucma_init_qp_attr()
Date: Fri, 4 Feb 2022 19:55:59 -0400	[thread overview]
Message-ID: <> (raw)
In-Reply-To: <20220204100036.GA12348@kili>

On Fri, Feb 04, 2022 at 01:00:36PM +0300, Dan Carpenter wrote:
> From: Haimin Zhang <>
> The ib_copy_ah_attr_to_user() function only initializes "resp.grh" if
> the "resp.is_global" flag is set.  Unfortunately, this data is copied to
> the user and copying uninitialized stack data to the user is an
> information leak.  Zero out the whole "resp" struct to be safe.

Hasn't this already been fixed, and more comprehensively too?

commit b35a0f4dd544eaa6162b6d2f13a2557a121ae5fd
Author: Leon Romanovsky <>
Date:   Tue Jan 4 14:21:52 2022 +0200

    RDMA/core: Don't infoleak GRH fields
    If dst->is_global field is not set, the GRH fields are not cleared
    and the following infoleak is reported.


  reply	other threads:[~2022-02-04 23:56 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-02-04 10:00 [PATCH v2] RDMA/ucma: RDMA/ucma: fix a kernel-infoleak in ucma_init_qp_attr() Dan Carpenter
2022-02-04 23:55 ` Jason Gunthorpe [this message]
2022-02-05  9:11   ` Dan Carpenter

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.