diff options
| author | Mathias Krause <minipli@googlemail.com> | 2012-07-12 08:46:55 +0200 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2013-03-27 02:41:03 +0000 |
| commit | ac23922b930695ed3178cab78b0a9c31a9fa226b (patch) | |
| tree | 24ce8c054b0d47d6119abef3eeabc4b5b1a1a495 | |
| parent | 723353fdc4de94bf78026b6c17cf9dbbe5f29a1a (diff) | |
| download | lwn-ac23922b930695ed3178cab78b0a9c31a9fa226b.tar.gz lwn-ac23922b930695ed3178cab78b0a9c31a9fa226b.zip | |
udf: avoid info leak on export
commit 0143fc5e9f6f5aad4764801015bc8d4b4a278200 upstream.
For type 0x51 the udf.parent_partref member in struct fid gets copied
uninitialized to userland. Fix this by initializing it to 0.
Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
| -rw-r--r-- | fs/udf/namei.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/fs/udf/namei.c b/fs/udf/namei.c index 4639e137222f..71c97fbba4d2 100644 --- a/fs/udf/namei.c +++ b/fs/udf/namei.c @@ -1293,6 +1293,7 @@ static int udf_encode_fh(struct dentry *de, __u32 *fh, int *lenp, *lenp = 3; fid->udf.block = location.logicalBlockNum; fid->udf.partref = location.partitionReferenceNum; + fid->udf.parent_partref = 0; fid->udf.generation = inode->i_generation; if (connectable && !S_ISDIR(inode->i_mode)) { |