| From 8f7e2d073ac5d0e0240e2d93469d648729aa326c Mon Sep 17 00:00:00 2001 |
| From: Mathias Krause <minipli@googlemail.com> |
| Date: Thu, 12 Jul 2012 08:46:54 +0200 |
| Subject: [PATCH] isofs: avoid info leak on export |
| |
| commit fe685aabf7c8c9f138e5ea900954d295bf229175 upstream. |
| |
| For type 1 the parent_offset member in struct isofs_fid gets copied |
| uninitialized to userland. Fix this by initializing it to 0. |
| |
| Signed-off-by: Mathias Krause <minipli@googlemail.com> |
| Signed-off-by: Jan Kara <jack@suse.cz> |
| Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> |
| --- |
| fs/isofs/export.c | 1 + |
| 1 file changed, 1 insertion(+) |
| |
| diff --git a/fs/isofs/export.c b/fs/isofs/export.c |
| index ed752cb38474..344aa606eecd 100644 |
| --- a/fs/isofs/export.c |
| +++ b/fs/isofs/export.c |
| @@ -131,6 +131,7 @@ isofs_export_encode_fh(struct dentry *dentry, |
| len = 3; |
| fh32[0] = ei->i_iget5_block; |
| fh16[2] = (__u16)ei->i_iget5_offset; /* fh16 [sic] */ |
| + fh16[3] = 0; /* avoid leaking uninitialized data */ |
| fh32[2] = inode->i_generation; |
| if (connectable && !S_ISDIR(inode->i_mode)) { |
| struct inode *parent; |
| -- |
| 1.8.5.2 |
| |
