Patch "net: Zero terminate ifr_name in dev_ifname()." has been added to the 3.18-stable tree
Subsystems (2)
This is a note to let you know that I've just added the patch titled
net: Zero terminate ifr_name in dev_ifname().
to the 3.18-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
net-zero-terminate-ifr_name-in-dev_ifname.patch
and it can be found in the queue-3.18 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From foo@baz Tue Aug 8 16:54:20 PDT 2017
From: "David S. Miller" <[email protected]>
Date: Wed, 19 Jul 2017 13:33:24 -0700
Subject: net: Zero terminate ifr_name in dev_ifname().
From: "David S. Miller" <[email protected]>
[ Upstream commit 63679112c536289826fec61c917621de95ba2ade ]
The ifr.ifr_name is passed around and assumed to be NULL terminated.
--- net/core/dev_ioctl.c | 1 + 1 file changed, 1 insertion(+)
net/core/dev_ioctl.c +1 -0
@@ -28,6 +28,7 @@ static int dev_ifname(struct net *net, sif (copy_from_user (&ifr, arg,sizeof (struct ifreq )))return -EFAULT ; + ifr.ifr_name[IFNAMSIZ -1 ] =0 ; error =netdev_get_name (net, ifr.ifr_name, ifr.ifr_ifindex);if (error)
Patches currently in stable-queue which might be from [email protected] are
queue-3.18/r8169-add-support-for-rtl8168-series-add-on-card.patch queue-3.18/kaweth-fix-oops-upon-failed-memory-allocation.patch queue-3.18/isdn-fix-a-sleep-in-atomic-bug.patch queue-3.18/sctp-don-t-dereference-ptr-before-leaving-_sctp_walk_-params-errors.patch queue-3.18/ipv6-fix-possible-deadlock-in-ip6_fl_purge-ip6_fl_gc.patch queue-3.18/net-sched-fix-soft-lockup-in-tc_classify.patch queue-3.18/sctp-fix-the-check-for-_sctp_walk_params-and-_sctp_walk_errors.patch queue-3.18/packet-fix-use-after-free-in-prb_retire_rx_blk_timer_expired.patch queue-3.18/rtnetlink-allocate-more-memory-for-dev_set_mac_address.patch queue-3.18/net-skb_needs_check-accepts-checksum_none-for-tx.patch queue-3.18/sh_eth-fix-ethtool-operation-crash-when-net-device-is-down.patch queue-3.18/ipv6-should-use-consistent-conditional-judgement-for-ip6-fragment-between-__ip6_append_data-and-ip6_finish_output.patch queue-3.18/net-sctp-fix-race-for-one-to-many-sockets-in-sendmsg-s-auto-associate.patch queue-3.18/net-phy-do-not-perform-software-reset-for-generic-phy.patch queue-3.18/vlan-propagate-mac-address-to-vlans.patch queue-3.18/net-mlx4-remove-bug_on-from-icm-allocation-routine.patch queue-3.18/mcs7780-fix-initialization-when-config_vmap_stack-is-enabled.patch queue-3.18/net-zero-terminate-ifr_name-in-dev_ifname.patch queue-3.18/net-phy-correctly-process-phy_halted-in-phy_stop_machine.patch queue-3.18/ipv6-avoid-overflow-of-offset-in-ip6_find_1stfragopt.patch queue-3.18/xen-netback-correctly-schedule-rate-limited-queues.patch queue-3.18/net-reduce-skb_warn_bad_offload-noise.patch queue-3.18/dccp-fix-a-memleak-for-dccp_feat_init-err-process.patch queue-3.18/kaweth-fix-firmware-download.patch queue-3.18/ipv4-initialize-fib_trie-prior-to-register_netdev_notifier-call.patch