The following commit has been merged in the openafs-stable-1_6_x branch:
commit 283b950ed53c3c248078c9aaab10227de539b06d
Author: Mark Vitale <[email protected]>
Date: Tue Jun 26 03:47:41 2018 -0400
OPENAFS-SA-2018-002 afs: prevent RXAFSCB_GetLock information leak
RXAFSCB_GetLock (cmdebug) does not correctly initialize its output.
This leaks kernel memory over the wire:
struct AFSDBLock
- up to 14 bytes for member name (16 - '<cellname>\0')
Initialize the buffer.
(cherry picked from commit b52eb11a08f2ad786238434141987da27b81e743)
(cherry picked from commit 3dea4adaa356b7eed40b6162c106c5e90690f5a1)
(cherry picked from commit f0c4f8d899214bf405e809be813be4d5be125ad8)
Change-Id: I3935968bacb8e063fd1fdd2fc52efd2258a5eb99
src/afs/afs_callback.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
--
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs
