OpenAFS Master Repository branch, openafs-stable-1_6_x, updated. openafs-stable-1_6_22_2-73-g0cdb370

Gerrit Code Review gerrit@openafs.org
Tue, 11 Sep 2018 15:00:57 -0400


The following commit has been merged in the openafs-stable-1_6_x branch:
commit 9db5fcf460988b605ba8ba7078b9c8d702aba370
Author: Mark Vitale <mvitale@sinenomine.net>
Date:   Tue Jun 26 06:01:16 2018 -0400

    OPENAFS-SA-2018-002 ubik: prevent VOTE_Debug, VOTE_XDebug information leak
    
    VOTE_Debug and VOTE_XDebug (udebug) both leave a single field
    uninitialized if there is no current transaction.  This leaks the memory
    contents of the ubik server over the wire.
    
    struct ubik_debug
    - 4 bytes in member writeTrans
    
    In common code to both RPCs, ensure that writeTrans is always
    initialized.
    
    [kaduk@mit.edu: switch to memset]
    
    (cherry picked from commit 7a7c1f751cdb06c0d95339c999b2c035c2d2168b)
    
    (cherry picked from commit 0ee86cc3f986365df9de21ede5735cc1f40db7e5)
    
    Change-Id: I7fcde3970e6c6d46c8ac1caecd76fa9cb832807c

 src/ubik/vote.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

-- 
OpenAFS Master Repository