Peilin Ye bbc8a99e95 rds: Prevent kernel-infoleak in rds_notify_queue_get() ... rds_notify_queue_get() is potentially copying uninitialized kernel stack memory to userspace since the compiler may leave a 4-byte hole at the end of `cmsg`. In 2016 we tried to fix this issue by doing `= { 0 };` on `cmsg`, which unfortunately does not always initialize that 4-byte hole. Fix it by using memset() instead. Cc: stable@vger.kernel.org Fixes: f037590fff ("rds: fix a leak of kernel memory") Fixes: bdbe6fbc6a ("RDS: recv.c") Suggested-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com> Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2020-07-31 16:52:48 -07:00
..
af_rds.c	Convert usage of IN_MULTICAST to ipv4_is_multicast	2019-09-05 09:38:32 +02:00
bind.c	net/rds: Check laddr_check before calling it	2019-09-27 12:10:55 +02:00
cong.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
connection.c	rds: If one path needs re-connection, check all and re-connect	2020-07-01 17:35:17 -07:00
ib_cm.c	RDMA/rds: Remove FMR support for memory registration	2020-06-02 20:32:53 -03:00
ib_frmr.c	RDMA/rds: Remove FMR support for memory registration	2020-06-02 20:32:53 -03:00
ib_mr.h	RDMA/rds: Remove FMR support for memory registration	2020-06-02 20:32:53 -03:00
ib_rdma.c	RDMA/rds: Remove FMR support for memory registration	2020-06-02 20:32:53 -03:00
ib_recv.c	net/rds: Use DMA memory pool allocation for rds_header	2019-10-03 12:11:08 -07:00
ib_ring.c
ib_send.c	net/rds: Handle ODP mr registration/unregistration	2020-01-18 11:48:19 +02:00
ib_stats.c	net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'	2019-09-15 20:56:19 +02:00
ib_sysctl.c
ib.c	RDMA: Remove 'max_fmr'	2020-06-02 20:32:54 -03:00
ib.h	net/rds: NULL pointer de-reference in rds_ib_add_one()	2020-06-15 12:58:59 -07:00
info.c	rds: fix crash in rds_info_getsockopt()	2020-05-20 14:08:06 -07:00
info.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
loop.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
loop.h	rds: clean up loopback rds_connections on netns deletion	2018-06-27 10:11:03 +09:00
Makefile	RDMA/rds: Remove FMR support for memory registration	2020-06-02 20:32:53 -03:00
message.c	net/rds: Use ERR_PTR for rds_message_alloc_sgs()	2020-04-15 12:33:29 -07:00
page.c	rds: remove dead code	2016-12-26 21:35:39 -05:00
rdma_transport.c	net: rds: add service level support in rds-info	2019-08-24 16:55:25 -07:00
rdma_transport.h	rds: rdma: add consumer reject	2019-02-04 14:59:11 -08:00
rdma.c	net/rds: Use ERR_PTR for rds_message_alloc_sgs()	2020-04-15 12:33:29 -07:00
rds_single_path.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
rds.h	rds: If one path needs re-connection, check all and re-connect	2020-07-01 17:35:17 -07:00
recv.c	rds: Prevent kernel-infoleak in rds_notify_queue_get()	2020-07-31 16:52:48 -07:00
send.c	rds: If one path needs re-connection, check all and re-connect	2020-07-01 17:35:17 -07:00
stats.c	rds: check for excessive looping in rds_send_xmit	2019-08-15 12:04:24 -07:00
sysctl.c	net: rds: fix coding style issues	2016-06-18 21:34:09 -07:00
tcp_connect.c	net: add sock_no_linger	2020-05-28 11:11:44 -07:00
tcp_listen.c	tcp: add tcp_sock_set_keepcnt	2020-05-28 11:11:45 -07:00
tcp_recv.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
tcp_send.c	tcp: add tcp_sock_set_cork	2020-05-28 11:11:45 -07:00
tcp_stats.c
tcp.c	tcp: add tcp_sock_set_nodelay	2020-05-28 11:11:45 -07:00
tcp.h	tcp: add tcp_sock_set_keepcnt	2020-05-28 11:11:45 -07:00
threads.c	rds: make v3.1 as compat version	2019-02-04 14:59:11 -08:00
transport.c	rds: transport module should be auto loaded when transport is set	2020-06-25 16:26:25 -07:00