Mathias Krause
2d6fbfe733
caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()
...
The current code does not fill the msg_name member in case it is set.
It also does not set the msg_namelen member to 0 and therefore makes
net/socket.c leak the local, uninitialized sockaddr_storage variable
to userland -- 128 bytes of kernel stack memory.
Fix that by simply setting msg_namelen to 0 as obviously nobody cared
about caif_seqpkt_recvmsg() not filling the msg_name in case it was
set.
Cc: Sjur Braendeland <sjur.brandeland@stericsson.com>
Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-04-07 16:28:01 -04:00
..
caif_dev.c
caif_dev: fix sparse warnings for caif_flow_cb
2013-03-03 01:43:48 -05:00
caif_socket.c
caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()
2013-04-07 16:28:01 -04:00
caif_usb.c
CAIF: fix sparse warning for caif_usb
2013-03-04 14:12:07 -05:00
cfcnfg.c
treewide: Fix typo in various drivers
2013-01-09 11:43:32 +01:00
cfctrl.c
caif: Remove redundant null check before kfree in cfctrl.c
2012-11-20 13:48:09 -05:00
cfdbgl.c
caif: Fix for a race in socket transmit with flow control.
2012-03-11 15:38:16 -07:00
cfdgml.c
caif: Fix for a race in socket transmit with flow control.
2012-03-11 15:38:16 -07:00
cffrml.c
percpu: Remove irqsafe_cpu_xxx variants
2011-12-22 10:40:20 -08:00
cfmuxl.c
caif: Bugfix list_del_rcu race in cfmuxl_ctrlcmd.
2012-02-02 14:35:12 -05:00
cfpkt_skbuff.c
caif: set traffic class for caif packets
2012-04-13 11:37:36 -04:00
cfrfml.c
caif: Fix for a race in socket transmit with flow control.
2012-03-11 15:38:16 -07:00
cfserl.c
caif: Remove unused enum and parameter in cfserl
2011-11-30 23:30:48 -05:00
cfsrvl.c
caif: move the dereference below the NULL test
2012-09-10 16:13:31 -04:00
cfutill.c
caif: Fix for a race in socket transmit with flow control.
2012-03-11 15:38:16 -07:00
cfveil.c
caif: Remove OOM messages, use kzalloc
2011-08-28 17:16:13 -04:00
cfvidl.c
caif: Fix for a race in socket transmit with flow control.
2012-03-11 15:38:16 -07:00
chnl_net.c
caif: Do not dereference NULL in chnl_recv_cb()
2012-08-20 02:47:49 -07:00
Kconfig
Kconfig: replace "--- help ---" with "---help---"
2012-05-07 15:01:22 +02:00
Makefile
caif: Add support for CAIF over CDC NCM USB interface
2011-12-05 18:27:56 -05:00