Re: [PATCH net 0/4] xfrm_user info leaks

On 26 August 2017 at 17:58, Joe Perches [off-list ref] wrote:

On Sat, 2017-08-26 at 17:08 +0200, Mathias Krause wrote:

quoted

Hi David, Steffen,

the following series fixes a few info leaks due to missing padding byte
initialization in the xfrm_user netlink interface.

Were these found by inspection or by some tool?
If by tool, perhaps there are other _to_user cases?

I found the one in the offload API by manual inspection, looked around
a little and found the others. No tool involved.

I already looked at the xfrm_user API back in 2012 and fixed quite a
few info leaks but missed the ones in the netlink multicast
notification code :/


Regards,
Mathias