Dan Rosenberg 043d7866ae xfs: prevent reading uninitialized stack memory ...

commit a122eb2fdf upstream.

The XFS_IOC_FSGETXATTR ioctl allows unprivileged users to read 12
bytes of uninitialized stack memory, because the fsxattr struct
declared on the stack in xfs_ioc_fsgetxattr() does not alter (or zero)
the 12-byte fsx_pad member before copying it back to the user.  This
patch takes care of it.

Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Reviewed-by: Eric Sandeen <sandeen@redhat.com>
Signed-off-by: Alex Elder <aelder@sgi.com>
Cc: dann frazier <dannf@debian.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-09-26 17:21:30 -07:00

..

kmem.c

Fix congestion_wait() sync/async vs read/write confusion

2009-07-10 20:31:53 +02:00

kmem.h

xfs: prevent deadlock in xfs_qm_shake()

2009-06-01 22:59:45 -05:00

mrlock.h

…

sv.h

remove dead code from sv_t implementation

2008-12-04 15:39:21 +11:00

time.h

…

xfs_acl.c

xfs: fix timestamp handling in xfs_setattr

2010-04-26 07:41:15 -07:00

xfs_aops.c

xfs: Non-blocking inode locking in IO completion

2010-04-26 07:41:16 -07:00

xfs_aops.h

xfs: prevent unwritten extent conversion from blocking I/O completion

2009-04-06 18:42:11 +02:00

xfs_buf.c

Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs

2009-08-12 08:49:35 -07:00

xfs_buf.h

xfs: only issues a cache flush on unmount if barriers are enabled

2009-03-06 17:35:12 -06:00

xfs_cred.h

[XFS] Fix merge failures

2008-12-29 16:47:18 +11:00

xfs_dmapi_priv.h

…

xfs_export.c

[XFS] pass XFS_IGET_BULKSTAT to xfs_iget for handle operations

2009-01-09 15:17:17 +11:00

xfs_export.h

…

xfs_file.c

Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs

2009-10-09 13:29:42 -07:00

xfs_fs_subr.c

xfs: use xfs_sync_inodes() for device flushing

2009-04-06 18:44:54 +02:00

xfs_fs_subr.h

…

xfs_globals.c

[XFS] remove restricted chown parameter from xfs linux

2008-10-30 18:30:48 +11:00

xfs_globals.h

CRED: Separate task security context from task_struct

2008-11-14 10:39:16 +11:00

xfs_ioctl32.c

xfs: actually enable the swapext compat handler

2009-09-01 17:00:46 -05:00

xfs_ioctl32.h

[XFS] fix compile on 32 bit systems

2008-12-04 13:07:29 +11:00

xfs_ioctl.c

xfs: prevent reading uninitialized stack memory

2010-09-26 17:21:30 -07:00

xfs_ioctl.h

xfs: fix dentry aliasing issues in open_by_handle

2009-01-19 14:43:18 +11:00

xfs_iops.c

xfs: Fix error return for fallocate() on XFS

2010-04-26 07:41:14 -07:00

xfs_iops.h

[XFS] add a FMODE flag to make XFS invisible I/O less hacky

2008-12-11 13:14:41 +11:00

xfs_linux.h

block: rename CONFIG_LBD to CONFIG_LBDAF

2009-06-19 08:08:50 +02:00

xfs_lrw.c

xfs: implement ->dirty_inode to fix timestamp handling

2009-10-08 12:00:03 -05:00

xfs_lrw.h

…

xfs_quotaops.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/fs/xfs/xfs

2009-10-31 12:12:49 -07:00

xfs_stats.c

xfs: switch to seq_file

2009-09-15 12:29:24 -05:00

xfs_stats.h

[XFS] add new btree statistics

2008-10-30 16:55:03 +11:00

xfs_super.c

xfs: add a shrinker to background inode reclaim

2010-05-12 14:57:13 -07:00

xfs_super.h

const: make struct super_block::s_qcop const

2009-09-22 07:17:24 -07:00

xfs_sync.c

xfs: add a shrinker to background inode reclaim

2010-05-12 14:57:13 -07:00

xfs_sync.h

xfs: add a shrinker to background inode reclaim

2010-05-12 14:57:13 -07:00

xfs_sysctl.c

sysctl: remove "struct file *" argument of ->proc_handler

2009-09-24 07:21:04 -07:00

xfs_sysctl.h

[XFS] remove restricted chown parameter from xfs linux

2008-10-30 18:30:48 +11:00

xfs_version.h

…

xfs_vnode.h

xfs: kill VN_BAD

2009-03-16 08:25:25 +01:00

xfs_xattr.c

xfs: use generic Posix ACL code

2009-06-10 17:07:47 +02:00