[SECURITY] CAN-2004-0177 (was: Re: [SECURITY] CAN-2004-0075)

[Marc-Christian Petersen <m.c.p@kernel.linux-systeme.com>]

[-- Attachment #1: Type: text/plain, Size: 761 bytes --]

On Wednesday 14 April 2004 22:30, you wrote:

Hi again,

> Okay, now while we are at fixing security holes, is there any chance we
> can get the attached patch in?

Okay, we are at it, so what's about the attached one too? ;)

In WOLK for some time too. I am not 100% sure if this is correct, but I think 
it is. Andrew? Stephen?

----------------------------------------------------------------------
CAN-2004-0177
    Solar Designer discovered an information leak in the ext3 code of
    Linux.  In a worst case an attacker could read sensitive data such
    as cryptographic keys which would otherwise never hit disk media.
    Theodore Ts'o developed a correction for this.
----------------------------------------------------------------------

ciao, Marc

[-- Attachment #2: 8009_CAN-2004-0177-ext3.patch --]
[-- Type: text/x-diff, Size: 360 bytes --]

--- a/fs/jbd/journal.c	Mon Nov 10 00:12:14 2003
+++ b/fs/jbd/journal.c	Fri Feb 27 20:36:04 2004
@@ -599,6 +599,7 @@
 		return NULL;
 
 	bh = __getblk(journal->j_dev, blocknr, journal->j_blocksize);
+	memset(bh->b_data, 0, journal->j_blocksize);
 	bh->b_state |= (1 << BH_Dirty);
 	BUFFER_TRACE(bh, "return this buffer");
 	return journal_add_journal_head(bh);