lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Fri, 07 Jan 2022 14:20:10 +0000 From: patchwork-bot+netdevbpf@...nel.org To: Dan Carpenter <dan.carpenter@...cle.com> Cc: jreuter@...na.de, hch@....de, ralf@...ux-mips.org, stefan@...enfreihafen.org, matthieu.baerts@...sares.net, linux-hams@...r.kernel.org, netdev@...r.kernel.org, kernel-janitors@...r.kernel.org Subject: Re: [PATCH net] ax25: uninitialized variable in ax25_setsockopt() Hello: This patch was applied to netdev/net.git (master) by David S. Miller <davem@...emloft.net>: On Fri, 7 Jan 2022 10:13:12 +0300 you wrote: > The "opt" variable is unsigned long but we only copy 4 bytes from > the user so the lower 4 bytes are uninitialized. > > I have changed the integer overflow checks from ULONG to UINT as well. > This is a slight API change but I don't expect it to break anything. > > Fixes: a7b75c5a8c41 ("net: pass a sockptr_t into ->setsockopt") > Signed-off-by: Dan Carpenter <dan.carpenter@...cle.com> > > [...] Here is the summary with links: - [net] ax25: uninitialized variable in ax25_setsockopt() https://git.kernel.org/netdev/net/c/9371937092d5 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
Powered by blists - more mailing lists