[PATCH] sys_get_thread_area does not clear the returned argument
authorBlaisorblade <blaisorblade@yahoo.it>
Wed, 27 Jul 2005 18:45:18 +0000 (11:45 -0700)
committerLinus Torvalds <torvalds@g5.osdl.org>
Wed, 27 Jul 2005 23:26:08 +0000 (16:26 -0700)
commit71ae18ec690953e9ba7107c7cc44589c2cc0d9f1
treef2a0c8e0b67120d61f9216638482d5f472e27f29
parent44456d37b59d8e541936ed26d8b6e08d27e88ac1
[PATCH] sys_get_thread_area does not clear the returned argument

sys_get_thread_area does not memset to 0 its struct user_desc info before
copying it to user space...  since sizeof(struct user_desc) is 16 while the
actual datas which are filled are only 12 bytes + 9 bits (across the
bitfields), there is a (small) information leak.

Signed-off-by: Paolo 'Blaisorblade' Giarrusso <blaisorblade@yahoo.it>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
arch/i386/kernel/process.c