diff options
| author | Eric Dumazet <eric.dumazet@gmail.com> | 2009-08-05 22:27:43 -0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2009-08-06 16:08:45 -0400 |
| commit | 3d392475c873c10c10d6d96b94d092a34ebd4791 (patch) | |
| tree | 5746cbd3c9d6fe4ca262a77353b7543b2bf36827 | |
| parent | f6b97b29513950bfbf621a83d85b6f86b39ec8db (diff) | |
appletalk: fix atalk_getname() leak
atalk_getname() can leak 8 bytes of kernel memory to user
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/appletalk/ddp.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/appletalk/ddp.c b/net/appletalk/ddp.c index 590b83963622..9ef6ff26eb0c 100644 --- a/net/appletalk/ddp.c +++ b/net/appletalk/ddp.c | |||
| @@ -1237,6 +1237,7 @@ static int atalk_getname(struct socket *sock, struct sockaddr *uaddr, | |||
| 1237 | return -ENOBUFS; | 1237 | return -ENOBUFS; |
| 1238 | 1238 | ||
| 1239 | *uaddr_len = sizeof(struct sockaddr_at); | 1239 | *uaddr_len = sizeof(struct sockaddr_at); |
| 1240 | memset(&sat.sat_zero, 0, sizeof(sat.sat_zero)); | ||
| 1240 | 1241 | ||
| 1241 | if (peer) { | 1242 | if (peer) { |
| 1242 | if (sk->sk_state != TCP_ESTABLISHED) | 1243 | if (sk->sk_state != TCP_ESTABLISHED) |