From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linuxfoundation.org ([140.211.169.12]:39200 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752441AbdHIATQ (ORCPT ); Tue, 8 Aug 2017 20:19:16 -0400 Subject: Patch "net: Zero terminate ifr_name in dev_ifname()." has been added to the 4.4-stable tree To: davem@davemloft.net, gregkh@linuxfoundation.org Cc: , From: Date: Tue, 08 Aug 2017 17:18:59 -0700 Message-ID: <1502237939199249@kroah.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ANSI_X3.4-1968 Content-Transfer-Encoding: 8bit Sender: stable-owner@vger.kernel.org List-ID: This is a note to let you know that I've just added the patch titled net: Zero terminate ifr_name in dev_ifname(). to the 4.4-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: net-zero-terminate-ifr_name-in-dev_ifname.patch and it can be found in the queue-4.4 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let know about it. >>From foo@baz Tue Aug 8 16:51:58 PDT 2017 From: "David S. Miller" Date: Wed, 19 Jul 2017 13:33:24 -0700 Subject: net: Zero terminate ifr_name in dev_ifname(). From: "David S. Miller" [ Upstream commit 63679112c536289826fec61c917621de95ba2ade ] The ifr.ifr_name is passed around and assumed to be NULL terminated. Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman --- net/core/dev_ioctl.c | 1 + 1 file changed, 1 insertion(+) --- a/net/core/dev_ioctl.c +++ b/net/core/dev_ioctl.c @@ -28,6 +28,7 @@ static int dev_ifname(struct net *net, s if (copy_from_user(&ifr, arg, sizeof(struct ifreq))) return -EFAULT; + ifr.ifr_name[IFNAMSIZ-1] = 0; error = netdev_get_name(net, ifr.ifr_name, ifr.ifr_ifindex); if (error) Patches currently in stable-queue which might be from davem@davemloft.net are queue-4.4/ipv4-ipv6-initialize-treq-txhash-in-cookie_v_check.patch queue-4.4/openvswitch-fix-potential-out-of-bound-access-in-parse_ct.patch queue-4.4/ipv6-don-t-increase-ipstats_mib_fragfails-twice-in-ip6_fragment.patch queue-4.4/sctp-don-t-dereference-ptr-before-leaving-_sctp_walk_-params-errors.patch queue-4.4/net-ethernet-nb8800-handle-all-4-rgmii-modes-identically.patch queue-4.4/sctp-fix-the-check-for-_sctp_walk_params-and-_sctp_walk_errors.patch queue-4.4/packet-fix-use-after-free-in-prb_retire_rx_blk_timer_expired.patch queue-4.4/rtnetlink-allocate-more-memory-for-dev_set_mac_address.patch queue-4.4/sparc64-measure-receiver-forward-progress-to-avoid-send-mondo-timeout.patch queue-4.4/dccp-fix-a-memleak-that-dccp_ipv6-doesn-t-put-reqsk-properly.patch queue-4.4/sparc64-prevent-perf-from-running-during-super-critical-sections.patch queue-4.4/dccp-fix-a-memleak-that-dccp_ipv4-doesn-t-put-reqsk-properly.patch queue-4.4/mcs7780-fix-initialization-when-config_vmap_stack-is-enabled.patch queue-4.4/net-zero-terminate-ifr_name-in-dev_ifname.patch queue-4.4/net-phy-correctly-process-phy_halted-in-phy_stop_machine.patch queue-4.4/ipv6-avoid-overflow-of-offset-in-ip6_find_1stfragopt.patch queue-4.4/xen-netback-correctly-schedule-rate-limited-queues.patch queue-4.4/dccp-fix-a-memleak-for-dccp_feat_init-err-process.patch queue-4.4/ipv4-initialize-fib_trie-prior-to-register_netdev_notifier-call.patch