git://git.openafs.org / openafs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9d1aeb5) | patch
OPENAFS-SA-2018-002 afs: prevent RXAFSCB_GetLock information leak
authorMark Vitale <mvitale@sinenomine.net>
Tue, 26 Jun 2018 07:47:41 +0000 (03:47 -0400)
committerBenjamin Kaduk <kaduk@mit.edu>
Sun, 9 Sep 2018 22:33:49 +0000 (17:33 -0500)
commitb52eb11a08f2ad786238434141987da27b81e743
treea9bae46bae435da70e1b87bebb9ddd7ad02724fetree | snapshot
parent9d1aeb5d761581a35bef2042e9116b96e9ae3bf5commit | diff
OPENAFS-SA-2018-002 afs: prevent RXAFSCB_GetLock information leak

RXAFSCB_GetLock (cmdebug) does not correctly initialize its output.
This leaks kernel memory over the wire:

struct AFSDBLock
- up to 14 bytes for member name (16 - '<cellname>\0')

Initialize the buffer.

Change-Id: I4c5c8d67816c51645c0db44dc8f19b1b27c02757
src/afs/afs_callback.c diff | blob | history
OpenAFS Master Repository