git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 51dced5) | patch
[S390] user readable uninitialised kernel memory.
authorMartin Schwidefsky <schwidefsky@de.ibm.com>
Thu, 28 Sep 2006 14:56:03 +0000 (16:56 +0200)
committerMartin Schwidefsky <schwidefsky@de.ibm.com>
Thu, 28 Sep 2006 14:56:03 +0000 (16:56 +0200)
commit52149ba6b0ddf3e9d965257cc0513193650b3ea8
treeaf8097516b3cd9d9f2397080e4cf81414fd4172atree | snapshot
parent51dced544e3964b684afc99282ceceaa384b16a8commit | diff
[S390] user readable uninitialised kernel memory.

A user space program can read uninitialised kernel memory
by appending to a file from a bad address and then reading
the result back. The cause is the copy_from_user function
that does not clear the remaining bytes of the kernel
buffer after it got a fault on the user space address.

Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
arch/s390/lib/uaccess_mvcos.c diff | blob | history
arch/s390/lib/uaccess_std.c diff | blob | history
Full containers within linux kernel