Re: Information leak in pptp_bind

2015-12-14 Thread Hannes Frederic Sowa
On 14.12.2015 11:38, Dmitry Vyukov wrote: > The following program leak various uninit garbage including kernel > addresses and whatever is on kernel stack, in particular defeating > ASLR. The issue is in pptp_bind which does not verify sockaddr_len. Thanks for the report! I send out a patch soon.

Information leak in pptp_bind

2015-12-14 Thread Dmitry Vyukov
Hello, The following program leak various uninit garbage including kernel addresses and whatever is on kernel stack, in particular defeating ASLR. The issue is in pptp_bind which does not verify sockaddr_len #include #include #include #include #include #include #include #include #include