From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christoph Hellwig Subject: Re: [PATCH 2/2] sg: fixup infoleak when using SG_GET_REQUEST_TABLE Date: Fri, 15 Sep 2017 19:54:55 +0200 Message-ID: <20170915175455.GB8805@lst.de> References: <1505477116-75013-1-git-send-email-hare@suse.de> <1505477116-75013-3-git-send-email-hare@suse.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from verein.lst.de ([213.95.11.211]:38811 "EHLO newverein.lst.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751184AbdIORy4 (ORCPT ); Fri, 15 Sep 2017 13:54:56 -0400 Content-Disposition: inline In-Reply-To: <1505477116-75013-3-git-send-email-hare@suse.de> Sender: linux-scsi-owner@vger.kernel.org List-Id: linux-scsi@vger.kernel.org To: Hannes Reinecke Cc: "Martin K. Petersen" , Christoph Hellwig , James Bottomley , linux-scsi@vger.kernel.org, Alexander Potapenko , Ingo Molnar , Dmitry Vyukov , security@kernel.org, Hannes Reinecke On Fri, Sep 15, 2017 at 02:05:16PM +0200, Hannes Reinecke wrote: > When calling SG_GET_REQUEST_TABLE ioctl that only a half-filled > table is returned; the remaining part will then contain stale > kernel memory information. > This patch zeroes out the entire table to avoid this issue. > > Signed-off-by: Hannes Reinecke Looks good, Reviewed-by: Christoph Hellwig