linux/net/l2tp
Mathias Krause b860d3cc62 l2tp: fix info leak in l2tp_ip6_recvmsg()
The L2TP code for IPv6 fails to initialize the l2tp_conn_id member of
struct sockaddr_l2tpip6 and therefore leaks four bytes kernel stack
in l2tp_ip6_recvmsg() in case msg_name is set.

Initialize l2tp_conn_id with 0 to avoid the info leak.

Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-04-07 16:28:01 -04:00
..
Kconfig net/l2tp: remove depends on CONFIG_EXPERIMENTAL 2013-01-11 11:40:01 -08:00
Makefile l2tp: introduce L2TPv3 IP encapsulation support for IPv6 2012-05-01 09:30:55 -04:00
l2tp_core.c l2tp: unhash l2tp sessions on delete, not on free 2013-03-20 12:10:39 -04:00
l2tp_core.h l2tp: unhash l2tp sessions on delete, not on free 2013-03-20 12:10:39 -04:00
l2tp_debugfs.c l2tp: avoid deadlock in l2tp stats update 2013-03-20 12:10:39 -04:00
l2tp_eth.c l2tp: fix oops in l2tp_eth_create() error path 2012-11-02 21:56:35 -04:00
l2tp_ip.c l2tp: close sessions in ip socket destroy callback 2013-03-20 12:10:38 -04:00
l2tp_ip6.c l2tp: fix info leak in l2tp_ip6_recvmsg() 2013-04-07 16:28:01 -04:00
l2tp_netlink.c l2tp: avoid deadlock in l2tp stats update 2013-03-20 12:10:39 -04:00
l2tp_ppp.c l2tp: unhash l2tp sessions on delete, not on free 2013-03-20 12:10:39 -04:00