Patch "osf_wait4(): fix infoleak" has been added to the 4.11-stable tree
Subsystems (2)
This is a note to let you know that I've just added the patch titled
osf_wait4(): fix infoleak
to the 4.11-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
osf_wait4-fix-infoleak.patch
and it can be found in the queue-4.11 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
a8c39544a6eb2093c04afd5005b6192bd0e880c6Mon Sep 17 00:00:00 2001
From: Al Viro <[email protected]>
Date: Sun, 14 May 2017 21:47:25 -0400
Subject: osf_wait4(): fix infoleak
From: Al Viro <[email protected]>
commit a8c39544a6eb2093c04afd5005b6192bd0e880c6 upstream.
failing sys_wait4() won't fill struct rusage...
--- arch/alpha/kernel/osf_sys.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)
arch/alpha/kernel/osf_sys.c +4 -2
@@ -1199,8 +1199,10 @@ SYSCALL_DEFINE4(osf_wait4, pid_t, pid, iif (!access_ok (VERIFY_WRITE , ur,sizeof (*ur)))return -EFAULT ; - err =0 ; - err |=put_user (status, ustatus); + err =put_user (status, ustatus); +if (ret <0 ) +return err ? err : ret; + err |=__put_user (r.ru_utime.tv_sec, &ur->ru_utime.tv_sec); err |=__put_user (r.ru_utime.tv_usec, &ur->ru_utime.tv_usec); err |=__put_user (r.ru_stime.tv_sec, &ur->ru_stime.tv_sec);
Patches currently in stable-queue which might be from [email protected] are
queue-4.11/metag-uaccess-check-access_ok-in-strncpy_from_user.patch queue-4.11/osf_wait4-fix-infoleak.patch queue-4.11/x86-fix-32-bit-case-of-__get_user_asm_u64.patch queue-4.11/metag-uaccess-fix-access_ok.patch queue-4.11/make-stat-lstat-fstatat-pass-at_no_automount-to-vfs_statx.patch