From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from relay.sgi.com (relay2.corp.sgi.com [137.38.102.29]) by oss.sgi.com (Postfix) with ESMTP id E0C7A7CBF for ; Mon, 13 May 2013 05:04:29 -0500 (CDT) Received: from cuda.sgi.com (cuda3.sgi.com [192.48.176.15]) by relay2.corp.sgi.com (Postfix) with ESMTP id B4167304039 for ; Mon, 13 May 2013 03:04:26 -0700 (PDT) Received: from mx2.suse.de (cantor2.suse.de [195.135.220.15]) by cuda.sgi.com with ESMTP id I3PxmyuL4LyUhuy9 for ; Mon, 13 May 2013 03:04:25 -0700 (PDT) Date: Mon, 13 May 2013 12:04:23 +0200 From: Jan Kara Subject: Re: [Patch] quota: do not leak info to user-space Message-ID: <20130513100423.GD400@quack.suse.cz> References: <1368177873-4819-1-git-send-email-amwang@redhat.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <1368177873-4819-1-git-send-email-amwang@redhat.com> List-Id: XFS Filesystem from SGI List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: xfs-bounces@oss.sgi.com Sender: xfs-bounces@oss.sgi.com To: Cong Wang Cc: Andrew Morton , Jan Kara , linux-kernel@vger.kernel.org, xfs@oss.sgi.com On Fri 10-05-13 17:24:33, Cong Wang wrote: > From: Cong Wang > > There is a hole in struct fs_quota_stat, so we have to > zero the struct on stack before copying it to user-space. > > Cc: Jan Kara > Signed-off-by: Cong Wang Good point. I've merged the patch. BTW for XFS folks: The structure definition looks somewhat odd (unaligned definition of qs_flags, qs_uquota starts only at 32-bit boundary although it has 64-bit fields in it) and I wouldn't be surprised if it needed compat wrapper for 32-bit apps on some architectures... Honza > > --- > diff --git a/fs/quota/quota.c b/fs/quota/quota.c > index c7314f1..2b0c182 100644 > --- a/fs/quota/quota.c > +++ b/fs/quota/quota.c > @@ -211,6 +211,7 @@ static int quota_getxstate(struct super_block *sb, void __user *addr) > > if (!sb->s_qcop->get_xstate) > return -ENOSYS; > + memset(&fqs, 0, sizeof(fqs)); > ret = sb->s_qcop->get_xstate(sb, &fqs); > if (!ret && copy_to_user(addr, &fqs, sizeof(fqs))) > return -EFAULT; -- Jan Kara SUSE Labs, CR _______________________________________________ xfs mailing list xfs@oss.sgi.com http://oss.sgi.com/mailman/listinfo/xfs