The following commit has been merged in the openafs-stable-1_6_x branch:
commit 14a4e5bf9ec05946f67123531d6c64a612919e8c
Author: Daria Brashear <[email protected]>
Date:   Wed Jul 8 13:51:47 2015 -0400

    vos: Clear nvldbentry before sending on the wire
    
    Don't leak stack data onto the wire. Clear nvldbentry before use.
    
    FIXES 131907 (CVE-2015-3282)
    
    (cherry picked from commit 415a2aad4c1e9ab5d034b62989e4c16a37b5dcc7)
    
    Change-Id: Ic245a2b5ef5cc54a2a5fdfb5d458b6892c4bcf34

 src/volser/vos.c     |    2 ++
 src/volser/vsprocs.c |    8 ++++++++
 2 files changed, 10 insertions(+), 0 deletions(-)

-- 
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs

Reply via email to