Commit f1c0e202 authored by Darrick J. Wong's avatar Darrick J. Wong

xfs: fix kernel memory exposure problems

Fix a memory exposure problems in inumbers where we allocate an array of
structures with holes, fail to zero the holes, then blindly copy the
kernel memory contents (junk and all) into userspace.
Signed-off-by: default avatarDarrick J. Wong <darrick.wong@oracle.com>
Reviewed-by: default avatarChristoph Hellwig <hch@lst.de>
parent 105664df
...@@ -583,7 +583,7 @@ xfs_inumbers( ...@@ -583,7 +583,7 @@ xfs_inumbers(
return error; return error;
bcount = MIN(left, (int)(PAGE_SIZE / sizeof(*buffer))); bcount = MIN(left, (int)(PAGE_SIZE / sizeof(*buffer)));
buffer = kmem_alloc(bcount * sizeof(*buffer), KM_SLEEP); buffer = kmem_zalloc(bcount * sizeof(*buffer), KM_SLEEP);
do { do {
struct xfs_inobt_rec_incore r; struct xfs_inobt_rec_incore r;
int stat; int stat;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment