Re: [PATCH net] rds: set correct msg_namelen

2012-07-23 Thread David Miller
From: Weiping Pan Date: Mon, 23 Jul 2012 10:37:48 +0800 > Jay Fenlason (fenla...@redhat.com) found a bug, > that recvfrom() on an RDS socket can return the contents of random kernel > memory to userspace if it was called with a address length larger than > sizeof(struct sockaddr_in). > rds_recvms

[PATCH net] rds: set correct msg_namelen

2012-07-22 Thread Weiping Pan
Jay Fenlason (fenla...@redhat.com) found a bug, that recvfrom() on an RDS socket can return the contents of random kernel memory to userspace if it was called with a address length larger than sizeof(struct sockaddr_in). rds_recvmsg() also fails to set the addr_len paramater properly before returni