OpenAFS Master Repository branch, master, updated. BP-openafs-stable-1_8_x-220-gd5816fd
Gerrit Code Review
gerrit@openafs.org
Tue, 11 Sep 2018 15:01:02 -0400
The following commit has been merged in the master branch:
commit 7a7c1f751cdb06c0d95339c999b2c035c2d2168b
Author: Mark Vitale <mvitale@sinenomine.net>
Date: Tue Jun 26 06:01:16 2018 -0400
OPENAFS-SA-2018-002 ubik: prevent VOTE_Debug, VOTE_XDebug information leak
VOTE_Debug and VOTE_XDebug (udebug) both leave a single field
uninitialized if there is no current transaction. This leaks the memory
contents of the ubik server over the wire.
struct ubik_debug
- 4 bytes in member writeTrans
In common code to both RPCs, ensure that writeTrans is always
initialized.
[kaduk@mit.edu: switch to memset]
Change-Id: I91184b4ed0c159982a883ebaa9634406400eae93
src/ubik/vote.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
--
OpenAFS Master Repository