Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace

2017-06-26 Thread Martin K. Petersen
Seth, > Both aac_send_raw_srb() and aac_get_hba_info() may copy stack > allocated structs to userspace without initializing all members of > these structs. Clear out this memory to prevent information leaks. Applied to 4.13/scsi-queue. Thank you! -- Martin K. Petersen Oracle Linux Enginee

Re: [PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace

2017-06-23 Thread Johannes Thumshirn
On Fri, Jun 23, 2017 at 09:04:22AM -0500, Seth Forshee wrote: > Both aac_send_raw_srb() and aac_get_hba_info() may copy stack > allocated structs to userspace without initializing all members > of these structs. Clear out this memory to prevent information > leaks. > > Fixes: 423400e64d377 ("scsi:

[PATCH] scsi: aacraid: Don't copy uninitialized stack memory to userspace

2017-06-23 Thread Seth Forshee
Both aac_send_raw_srb() and aac_get_hba_info() may copy stack allocated structs to userspace without initializing all members of these structs. Clear out this memory to prevent information leaks. Fixes: 423400e64d377 ("scsi: aacraid: Include HBA direct interface") Fixes: c799d519bf088 ("scsi: aacr