git://git.openafs.org / openafs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7ee2586) | patch
OPENAFS-SA-2018-002 afs: prevent RXAFSCB_GetLock information leak
authorMark Vitale <mvitale@sinenomine.net>
Tue, 26 Jun 2018 07:47:41 +0000 (03:47 -0400)
committerBenjamin Kaduk <kaduk@mit.edu>
Mon, 10 Sep 2018 01:53:25 +0000 (20:53 -0500)
commitf0c4f8d899214bf405e809be813be4d5be125ad8
treedbe68b0295efb3078991f9fe00427398dbe2e4f8tree | snapshot
parent7ee25861685a4f56b304627ca2a0dbfed179646dcommit | diff
OPENAFS-SA-2018-002 afs: prevent RXAFSCB_GetLock information leak

RXAFSCB_GetLock (cmdebug) does not correctly initialize its output.
This leaks kernel memory over the wire:

struct AFSDBLock
- up to 14 bytes for member name (16 - '<cellname>\0')

Initialize the buffer.

(cherry picked from commit b52eb11a08f2ad786238434141987da27b81e743)

(cherry picked from commit 3dea4adaa356b7eed40b6162c106c5e90690f5a1)

Change-Id: Ic76ba3c80b7d1173f31c1e54f0f004eac4ddef86
src/afs/afs_callback.c diff | blob | history
OpenAFS Master Repository