diff options
author | Willem de Bruijn <willemb@google.com> | 2015-01-15 18:18:40 (GMT) |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2015-01-16 00:41:16 (GMT) |
commit | f812116b174e59a350acc8e4856213a166a91222 (patch) | |
tree | 9be0fd580d75289fec240cae10ab8ffcc6c85ed2 /drivers/i2c/i2c-dev.c | |
parent | 4315ef8d8b2e90e093a52ad31074dd0dafbed654 (diff) | |
download | linux-f812116b174e59a350acc8e4856213a166a91222.tar.xz |
ip: zero sockaddr returned on error queue
The sockaddr is returned in IP(V6)_RECVERR as part of errhdr. That
structure is defined and allocated on the stack as
struct {
struct sock_extended_err ee;
struct sockaddr_in(6) offender;
} errhdr;
The second part is only initialized for certain SO_EE_ORIGIN values.
Always initialize it completely.
An MTU exceeded error on a SOCK_RAW/IPPROTO_RAW is one example that
would return uninitialized bytes.
Signed-off-by: Willem de Bruijn <willemb@google.com>
----
Also verified that there is no padding between errhdr.ee and
errhdr.offender that could leak additional kernel data.
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/i2c/i2c-dev.c')
0 files changed, 0 insertions, 0 deletions