Re: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface

2016-04-13 Thread David Miller
From: Mathias Krause Date: Sun, 10 Apr 2016 12:52:28 +0200 > Because we miss to wipe the remainder of i->addr[] in packet_mc_add(), > pdiag_put_mclist() leaks uninitialized heap bytes via the > PACKET_DIAG_MCLIST netlink attribute. > > Fix this by explicitly memset(0)ing the remaining bytes in i

Re: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface

2016-04-11 Thread Pavel Emelyanov
On 04/10/2016 01:52 PM, Mathias Krause wrote: > Because we miss to wipe the remainder of i->addr[] in packet_mc_add(), > pdiag_put_mclist() leaks uninitialized heap bytes via the > PACKET_DIAG_MCLIST netlink attribute. > > Fix this by explicitly memset(0)ing the remaining bytes in i->addr[]. > >

[PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface

2016-04-10 Thread Mathias Krause
Because we miss to wipe the remainder of i->addr[] in packet_mc_add(), pdiag_put_mclist() leaks uninitialized heap bytes via the PACKET_DIAG_MCLIST netlink attribute. Fix this by explicitly memset(0)ing the remaining bytes in i->addr[]. Fixes: eea68e2f1a00 ("packet: Report socket mclist info via