Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP4:GA
xfsprogs.5309
0008-metadump-Obfuscate-the-filesystem-label.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0008-metadump-Obfuscate-the-filesystem-label.patch of Package xfsprogs.5309
From 8927d44b632cfdf49338a12b0b7a7a58a474de98 Mon Sep 17 00:00:00 2001 From: Eric Sandeen <sandeen@sandeen.net> Date: Thu, 30 Jul 2015 09:17:43 +1000 Subject: [PATCH 08/20] metadump: Obfuscate the filesystem label References: bsc#939367 CVE-2012-2150 Not a lot of room for sensitive data, but while we're at it... There is no need to do the normal hashed name, we just replace it with "L's" - and for kicks, we preserve the length of the label. Signed-off-by: Eric Sandeen <sandeen@redhat.com> Signed-off-by: Eric Sandeen <sandeen@sandeen.net> Reviewed-by: Brian Foster <bfoster@redhat.com> Signed-off-by: Dave Chinner <david@fromorbit.com> Acked-by: Jan Kara <jack@suse.com> --- db/metadump.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/db/metadump.c b/db/metadump.c index bea5de7c332d..5cc1ece983e6 100644 --- a/db/metadump.c +++ b/db/metadump.c @@ -2049,6 +2049,13 @@ scan_ag( if (stop_on_read_error) goto pop_out; } else { + /* Replace any filesystem label with "L's" */ + if (obfuscate) { + struct xfs_sb *sb = iocur_top->data; + memset(sb->sb_fname, 'L', + min(strlen(sb->sb_fname), sizeof(sb->sb_fname))); + iocur_top->need_crc = 1; + } if (write_buf(iocur_top)) goto pop_out; } -- 2.1.4
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor