فهرست منبع

ipv4: netfilter: ip_tables: fix information leak to userland

Structure ipt_getinfo is copied to userland with the field "name"
that has the last elements unitialized.  It leads to leaking of
contents of kernel stack memory.

Signed-off-by: Vasiliy Kulikov <segooon@gmail.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Vasiliy Kulikov 14 سال پیش
والد
کامیت
b5f15ac4f8
1فایلهای تغییر یافته به همراه1 افزوده شده و 0 حذف شده
  1. 1 0
      net/ipv4/netfilter/ip_tables.c

+ 1 - 0
net/ipv4/netfilter/ip_tables.c

@@ -1124,6 +1124,7 @@ static int get_info(struct net *net, void __user *user,
 			private = &tmp;
 			private = &tmp;
 		}
 		}
 #endif
 #endif
+		memset(&info, 0, sizeof(info));
 		info.valid_hooks = t->valid_hooks;
 		info.valid_hooks = t->valid_hooks;
 		memcpy(info.hook_entry, private->hook_entry,
 		memcpy(info.hook_entry, private->hook_entry,
 		       sizeof(info.hook_entry));
 		       sizeof(info.hook_entry));