rtnl: fix info leak on RTM_GETLINK request for VF devices
authorMathias Krause <minipli@googlemail.com>
Sat, 9 Mar 2013 05:52:20 +0000 (05:52 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Wed, 27 Mar 2013 02:40:58 +0000 (02:40 +0000)
commit2ed5a1be59dc5c54b33581031584e9bd35a3a3ab
tree5d1d74b752bf8b598e77b7a1276fe8d57f4484a8
parent57696b9f38a4915ff92d490e919af694103c844a
rtnl: fix info leak on RTM_GETLINK request for VF  devices

[ Upstream commit 84d73cd3fb142bf1298a8c13fd4ca50fd2432372 ]

Initialize the mac address buffer with 0 as the driver specific function
will probably not fill the whole buffer. In fact, all in-kernel drivers
fill only ETH_ALEN of the MAX_ADDR_LEN bytes, i.e. 6 of the 32 possible
bytes. Therefore we currently leak 26 bytes of stack memory to userland
via the netlink interface.

Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/core/rtnetlink.c