commit | 52149ba6b0ddf3e9d965257cc0513193650b3ea8 | [log] [tgz] |
---|---|---|
author | Martin Schwidefsky <schwidefsky@de.ibm.com> | Thu Sep 28 16:56:03 2006 +0200 |
committer | Martin Schwidefsky <schwidefsky@de.ibm.com> | Thu Sep 28 16:56:03 2006 +0200 |
tree | af8097516b3cd9d9f2397080e4cf81414fd4172a | |
parent | 51dced544e3964b684afc99282ceceaa384b16a8 [diff] |
[S390] user readable uninitialised kernel memory. A user space program can read uninitialised kernel memory by appending to a file from a bad address and then reading the result back. The cause is the copy_from_user function that does not clear the remaining bytes of the kernel buffer after it got a fault on the user space address. Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>