linux-kernel - [PATCH v2 0/2] tty: erase buffers when the kernel is done with it.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Thu,  4 Oct 2018 11:06:12 -0700
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     linux-serial@...r.kernel.org
Cc:     linux-kernel@...r.kernel.org, jslaby@...e.com, aszlig@....build,
        gmazyland@...il.com, torvalds@...ux-foundation.org, w@....eu,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Subject: [PATCH v2 0/2] tty: erase buffers when the kernel is done with it.

azlig and Milan Broz reported that when the tty layer is done with a
buffer, the data can hang around in it for a very long time.  That
sometimes can "leak" to userspace under some conditions.

Because of this, just zero out the data after the tty layer is finished
with it, for buffers that we "think" should be zeroed out.

v2 - addressed some review comments on the 2/2 patch.

Greg Kroah-Hartman (1):
  tty: wipe buffer if not echoing data

Linus Torvalds (1):
  tty: wipe buffer.

 drivers/tty/n_tty.c      | 20 +++++++++++++++++---
 drivers/tty/tty_buffer.c |  6 +++++-
 2 files changed, 22 insertions(+), 4 deletions(-)

-- 
2.19.0