Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3d392475 authored by Eric Dumazet's avatar Eric Dumazet Committed by David S. Miller
Browse files

appletalk: fix atalk_getname() leak 



atalk_getname() can leak 8 bytes of kernel memory to user

Signed-off-by: default avatarEric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent f6b97b29

net/appletalk/ddp.c

+1 −0
Original line number Original line Diff line number Diff line
@@ -1237,6 +1237,7 @@ static int atalk_getname(struct socket *sock, struct sockaddr *uaddr, 
			return -ENOBUFS;

			return -ENOBUFS;





	*uaddr_len = sizeof(struct sockaddr_at);

	*uaddr_len = sizeof(struct sockaddr_at);

	memset(&sat.sat_zero, 0, sizeof(sat.sat_zero));





	if (peer) {

	if (peer) {

		if (sk->sk_state != TCP_ESTABLISHED)

		if (sk->sk_state != TCP_ESTABLISHED)