linux-kernel - Re: [patch] cciss: info leak in cciss_ioctl32

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LFD.2.03.1306041602160.7145@erqung.pbz>
Date:	Tue, 4 Jun 2013 16:09:10 +0530 (IST)
From:	P J P <ppandit@...hat.com>
To:	linux-kernel@...r.kernel.org
cc:	Dan Carpenter <dan.carpenter@...cle.com>,
	Petr Matousek <pmatouse@...hat.com>
Subject: Re: [patch] cciss: info leak in cciss_ioctl32_passthru()

    Hello Dan,
===
diff --git a/drivers/block/cciss.c b/drivers/block/cciss.c
index 6374dc1..34971aa 100644
--- a/drivers/block/cciss.c
+++ b/drivers/block/cciss.c
@@ -1201,6 +1201,7 @@ static int cciss_ioctl32_passthru(struct block_device 
*bdev, fmode_t mode,
  	int err;
  	u32 cp;

+	memset(&arg64, 0, sizeof(arg64));
 	...
===

   This exact same patch was included back in 2010 by Mr Vasiliy Kulikov.

  -> https://git.kernel.org/linus/7ab5118d7c2be650bc936894f159dc1c597badae

But there is no entry/log of its reversal. Any idea why was it removed?

Thank you.
--
Prasad J Pandit / Red Hat Security Response Team
DB7A 84C5 D3F9 7CD1 B5EB  C939 D048 7860 3655 602B
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/