netdev - RE: [patch] qlcnic: info leak in qlcnic_dcb_peer_app

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Mon, 26 May 2014 05:28:29 +0000
From:	Sucheta Chakraborty <sucheta.chakraborty@...gic.com>
To:	Dan Carpenter <dan.carpenter@...cle.com>,
	Shahed Shaikh <shahed.shaikh@...gic.com>
CC:	Dept-HSG Linux NIC Dev <Dept-HSGLinuxNICDev@...gic.com>,
	netdev <netdev@...r.kernel.org>,
	"kernel-janitors@...r.kernel.org" <kernel-janitors@...r.kernel.org>
Subject: RE: [patch] qlcnic: info leak in qlcnic_dcb_peer_app_info()

> -----Original Message-----
> From: Dan Carpenter [mailto:dan.carpenter@...cle.com]
> Sent: Friday, May 23, 2014 10:07 PM
> To: Shahed Shaikh; Sucheta Chakraborty
> Cc: Dept-HSG Linux NIC Dev; netdev; kernel-janitors@...r.kernel.org
> Subject: [patch] qlcnic: info leak in qlcnic_dcb_peer_app_info()
> 
> This function is called from dcbnl_build_peer_app().  The "info"
> struct isn't initialized at all so we disclose 2 bytes of uninitialized
> stack data.  We should clear it before passing it to the user.
> 
> Fixes: 48365e485275 ('qlcnic: dcb: Add support for CEE Netlink
> interface.')
> Signed-off-by: Dan Carpenter <dan.carpenter@...cle.com>

Acked-by: Sucheta Chakraborty <sucheta.chakraborty@...gic.com>

Thanks,
Sucheta.

> ---
> This is a static analysis patch, and I am not familiar with this code.
> We may want to put some useful information here, to go with the
> app_count.
> 
> diff --git a/drivers/net/ethernet/qlogic/qlcnic/qlcnic_dcb.c
> b/drivers/net/ethernet/qlogic/qlcnic/qlcnic_dcb.c
> index a51fe18..561cb11 100644
> --- a/drivers/net/ethernet/qlogic/qlcnic/qlcnic_dcb.c
> +++ b/drivers/net/ethernet/qlogic/qlcnic/qlcnic_dcb.c
> @@ -1020,6 +1020,7 @@ static int qlcnic_dcb_peer_app_info(struct
> net_device *netdev,
>  	struct qlcnic_dcb_cee *peer;
>  	int i;
> 
> +	memset(info, 0, sizeof(*info));
>  	*app_count = 0;
> 
>  	if (!test_bit(QLCNIC_DCB_STATE, &adapter->dcb->state))
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html