From mboxrd@z Thu Jan 1 00:00:00 1970 From: Artem Bityutskiy Date: Fri, 26 Nov 2010 15:37:30 +0000 Subject: Re: [PATCH] mtd: mtdchar: fix information leak to userland Message-Id: <1290785850.2552.18.camel@localhost> List-Id: References: <1289054485-18190-1-git-send-email-segooon@gmail.com> In-Reply-To: <1289054485-18190-1-git-send-email-segooon@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit To: Vasiliy Kulikov Cc: David Woodhouse , kernel-janitors@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mtd@lists.infradead.org On Sat, 2010-11-06 at 17:41 +0300, Vasiliy Kulikov wrote: > Structure mtd_info_user is copied to userland with padding byted > between "type" and "flags" fields uninitialized. It leads to leaking > of contents of kernel stack memory. > > Signed-off-by: Vasiliy Kulikov Pushed to l2-mtd-2.6.git, thanks. -- Best Regards, Artem Bityutskiy (Артём Битюцкий) From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-bw0-f49.google.com ([209.85.214.49]) by canuck.infradead.org with esmtp (Exim 4.72 #1 (Red Hat Linux)) id 1PM0NJ-00012E-Ln for linux-mtd@lists.infradead.org; Fri, 26 Nov 2010 15:38:15 +0000 Received: by bwz5 with SMTP id 5so2021448bwz.36 for ; Fri, 26 Nov 2010 07:38:06 -0800 (PST) Subject: Re: [PATCH] mtd: mtdchar: fix information leak to userland From: Artem Bityutskiy To: Vasiliy Kulikov In-Reply-To: <1289054485-18190-1-git-send-email-segooon@gmail.com> References: <1289054485-18190-1-git-send-email-segooon@gmail.com> Content-Type: text/plain; charset="UTF-8" Date: Fri, 26 Nov 2010 17:37:30 +0200 Message-ID: <1290785850.2552.18.camel@localhost> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Cc: David Woodhouse , kernel-janitors@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mtd@lists.infradead.org Reply-To: dedekind1@gmail.com List-Id: Linux MTD discussion mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Sat, 2010-11-06 at 17:41 +0300, Vasiliy Kulikov wrote: > Structure mtd_info_user is copied to userland with padding byted > between "type" and "flags" fields uninitialized. It leads to leaking > of contents of kernel stack memory. > > Signed-off-by: Vasiliy Kulikov Pushed to l2-mtd-2.6.git, thanks. -- Best Regards, Artem Bityutskiy (Артём Битюцкий) From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754957Ab0KZPiL (ORCPT ); Fri, 26 Nov 2010 10:38:11 -0500 Received: from mail-bw0-f46.google.com ([209.85.214.46]:51637 "EHLO mail-bw0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751335Ab0KZPiI (ORCPT ); Fri, 26 Nov 2010 10:38:08 -0500 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:from:reply-to:to:cc:in-reply-to:references:content-type :date:message-id:mime-version:x-mailer:content-transfer-encoding; b=r6kbwSYApCMZ7bftGztMxFnUJocFOD6tbRM9R+vUu/S7TxTiyWmXioPIxEH+GDyKJ/ um5tfPAQWxPievPDPxJCM8DdnWqQ3FgyCPIHFlfZx7wsh+Gku1PlfXD+dmxbdFNppuYm 3Hkh5b+I/9KuVpTYrLoSxCN9j1mLS+s2IbvjI= Subject: Re: [PATCH] mtd: mtdchar: fix information leak to userland From: Artem Bityutskiy Reply-To: dedekind1@gmail.com To: Vasiliy Kulikov Cc: kernel-janitors@vger.kernel.org, David Woodhouse , linux-mtd@lists.infradead.org, linux-kernel@vger.kernel.org In-Reply-To: <1289054485-18190-1-git-send-email-segooon@gmail.com> References: <1289054485-18190-1-git-send-email-segooon@gmail.com> Content-Type: text/plain; charset="UTF-8" Date: Fri, 26 Nov 2010 17:37:30 +0200 Message-ID: <1290785850.2552.18.camel@localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.32.1 (2.32.1-1.fc14) Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, 2010-11-06 at 17:41 +0300, Vasiliy Kulikov wrote: > Structure mtd_info_user is copied to userland with padding byted > between "type" and "flags" fields uninitialized. It leads to leaking > of contents of kernel stack memory. > > Signed-off-by: Vasiliy Kulikov Pushed to l2-mtd-2.6.git, thanks. -- Best Regards, Artem Bityutskiy (Артём Битюцкий)