| commit | 91a4d157d0c18bd18fd95f90b67cb10d11701cca | [log] [tgz] |
|---|---|---|
| author | Vasiliy Kulikov <segoon@openwall.com> | Sun Nov 14 09:22:52 2010 +0000 |
| committer | Roland Dreier <rolandd@cisco.com> | Wed Dec 01 16:33:18 2010 -0800 |
| tree | 3e5f469737873ae4bfc13f6f9f21dfcc112d191e | |
| parent | f55864a4f435e47ad413be7016f38877b096bb5b [diff] |
IB: Fix information leak in marshalling code
ib_ucm_init_qp_attr() and ucma_init_qp_attr() pass struct ib_uverbs_qp_attr
with reserved, qp_state, {ah_attr,alt_ah_attr}{reserved,->grh.reserved}
fields uninitialized to copy_to_user(). This leads to leaking of
contents of kernel stack memory to userspace.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>