linux-stable/net/can
Dan Rosenberg 8ece1d6711 CAN: Use inode instead of kernel address for /proc file
commit 9f260e0efa upstream.

Since the socket address is just being used as a unique identifier, its
inode number is an alternative that does not leak potentially sensitive
information.

CC-ing stable because MITRE has assigned CVE-2010-4565 to the issue.

Signed-off-by: Dan Rosenberg <drosenberg@vsecurity.com>
Acked-by: Oliver Hartkopp <socketcan@hartkopp.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Cc: Moritz Muehlenhoff <jmm@debian.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-04-30 16:53:35 +02:00
..
af_can.c can: omit received RTR frames for single ID filter lists 2008-12-18 09:13:37 -08:00
af_can.h [CAN]: Add PF_CAN core module 2008-01-28 14:54:10 -08:00
bcm.c CAN: Use inode instead of kernel address for /proc file 2011-04-30 16:53:35 +02:00
Kconfig [CAN]: Add virtual CAN netdevice driver 2008-01-28 14:54:12 -08:00
Makefile [CAN]: Add broadcast manager (bcm) protocol 2008-01-28 14:54:11 -08:00
proc.c [CAN]: Add PF_CAN core module 2008-01-28 14:54:10 -08:00
raw.c can: Fix raw_getname() leak 2009-09-08 20:17:32 -07:00